MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

Summary When OAuth tokens are saved, MCP Atlassian always writes a plaintext fallback copy under /.mcp-atlassian/oauth-.json. The fallback file is created with the process default umask rather than restrictive permissions. In this environment the file was created as mode 0664, exposing access and...

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...

Malicious Package

Overview @test1230504/probe-7f3k2m-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview @tvg-mar/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview eslint-config-compact-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview epic-alt-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview n8n-nodes-data-transformer-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in zeal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...

MAL-2026-16542 Malicious code in zeal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...

Malicious code in style-class-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16540 Malicious code in style-class-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16417 Malicious code in eslint-config-compact-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7f8397efb591ffe6f87f9c44e8eb803606eb4789d357abe337d3225cc46f On require, index.js collects host reconnaissance data os.hostname, os.userInfo.username, os.platform, architecture, Node version, current working...

Malicious code in eslint-config-compact-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7f8397efb591ffe6f87f9c44e8eb803606eb4789d357abe337d3225cc46f On require, index.js collects host reconnaissance data os.hostname, os.userInfo.username, os.platform, architecture, Node version, current working...

MAL-2026-16514 Malicious code in @client-web-next/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @client-web-next/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

ROS-20260922-73-0131

The vulnerability of the lzmaindexAppend function in the XZ Utils data compression package is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Malicious Package

Overview @siriusbeyond/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @shared-web/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

abi-ds-utils (1.0.1) potentially affected by CVE-2026-82355 via apache-airflow (2.4.0)

apache-airflow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - abi-ds-utils 1.0.1 Source cves: CVE-2026-82355 Source advisory: OSV:PYSEC-2026-3989...

somenergia-dag-utils (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-82355 via apache-airflow (2.5.2)

apache-airflow PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - somenergia-dag-utils =0.2.0, =0.2.1 Source cves: CVE-2026-82355 Source advisory: OSV:PYSEC-2026-3989...