Malicious code in neanderthal-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c122a6fe5778bb430f198abe8838eb5d20ce083dca9ee1fdda16354222d1636 The package neanderthal-validator was found to contain malicious code. Source: ghsa-malware...

Malicious code in validator-lut-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9f447a3c02a6c7ea716862009fcf6853c8d52e05144fa78746cbdbfe3ef000 The package validator-lut-sdk was found to contain malicious code. Source: ghsa-malware...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: cargo-audit, wasmcloud, parseable, pixi, efs-utils, linkerd-extension-init, linkerd2-proxy, linkerd2, deno, rustls-ffi, zizmor, nushell, zed, ztunnel, buck2, lychee, ntpd-rs, linkerd-network-validator, rustup, qdrant, py3-xet-core...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: cargo-audit, wasmcloud, parseable, pixi, efs-utils, linkerd-extension-init, linkerd2-proxy, linkerd2, deno, rustls-ffi, zizmor, nushell, zed, ztunnel, buck2, lychee, ntpd-rs, linkerd-network-validator, rustup, qdrant, py3-xet-core, zellij...

Malicious code in osc-datagrid-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b6beb7674c12933f815ec6da07e3bcb65403fef71ed76e7c1c8805df763672 The package osc-datagrid-validator was found to contain malicious code...

MAL-2026-2382 Malicious code in osc-datagrid-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b6beb7674c12933f815ec6da07e3bcb65403fef71ed76e7c1c8805df763672 The package osc-datagrid-validator was found to contain malicious code...

Malicious code in express-session-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3beac16c32c8776482bafbb2ad95b50b7b18bf6e93fbf712238f60a4d7ae363d The package express-session-validator was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-session-vailidator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559c32a7f4713a1d785b35766355cf1a29ef437a0dc8e5285b980c9611175cff The package express-session-vailidator was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview express-session-validator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-2129 Malicious code in express-session-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3beac16c32c8776482bafbb2ad95b50b7b18bf6e93fbf712238f60a4d7ae363d The package express-session-validator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2128 Malicious code in express-session-vailidator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559c32a7f4713a1d785b35766355cf1a29ef437a0dc8e5285b980c9611175cff The package express-session-vailidator was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-http-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2471851d15cff5d3bc09d823660e1bebf3aee789535bf81e4f71c1ed6fa1fd86 The package express-http-validator was found to contain malicious code...

MAL-2026-1731 Malicious code in express-http-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2471851d15cff5d3bc09d823660e1bebf3aee789535bf81e4f71c1ed6fa1fd86 The package express-http-validator was found to contain malicious code...

Malicious code in polymarket-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5cc93272b23bb8876a4c2f2ce61ec7887bdeb6b89846a0c385022a156c6ca The package polymarket-validator was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview polymarket-validator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1463 Malicious code in polymarket-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5cc93272b23bb8876a4c2f2ce61ec7887bdeb6b89846a0c385022a156c6ca The package polymarket-validator was found to contain malicious code. Source: ghsa-malware...

CVE-2026-28402

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.2.2, a malicious or compromised validator that is elected as proposer can publish a macro block proposal where header.bodyroot does not match the...

CVE-2026-28402

The CVE concerns nimiq/core-rs-albatross (Rust Nimiq implementation). Before version 1.2.2, a proposer could publish a macro block where header.body_root does not equal hash(body); the macro proposal verification path validates the header but not the binding, potentially causing validators to pan...

CVE-2026-28402

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.2.2, a malicious or compromised validator that is elected as proposer can publish a macro block proposal where header.bodyroot does not match the...

CVE-2026-28402 nimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.2.2, a malicious or compromised validator that is elected as proposer can publish a macro block proposal where header.bodyroot does not match the...