vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-27209 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27209 Source advisory: MEND:CVE-2026-27209...

vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-27158 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27158 Source advisory: MEND:CVE-2026-27158...

vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-27159 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27159 Source advisory: MEND:CVE-2026-27159...

vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-27165 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27165 Source advisory: MEND:CVE-2026-27165...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-53863 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-53863 Source advisory: MEND:CVE-2026-53863...

vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-53855 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-53855 Source advisory: MEND:CVE-2026-53855...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-53850 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-53850 Source advisory: MEND:CVE-2026-53850...

Malicious code in @vantuz/sdk-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c955778a77086457edcccd20b8727c9f99b39c554fabea07dfb32f784d0f040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @vantuz/sdk-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-5886 Malicious code in @vantuz/sdk-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c955778a77086457edcccd20b8727c9f99b39c554fabea07dfb32f784d0f040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@chrysb/alphaclaw (0.8.7), vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-53825 via openclaw (>=0.0.1, <=2026.4.5)

openclaw NPM version =0.0.1, =3.3.2, =3.3.7 Source cves: CVE-2026-53825 Source advisory: MEND:CVE-2026-53825...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-45005 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-45005 Source advisory: MEND:CVE-2026-45005...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-45002 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-45002 Source advisory: MEND:CVE-2026-45002...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-44993 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-44993 Source advisory: MEND:CVE-2026-44993...

vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-8305 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-8305 Source advisory: MEND:CVE-2026-8305...

@chrysb/alphaclaw (>=0.8.7, <=0.9.5), @twsxtd/hapi-openclaw (>=0.1.0, <=0.1.8) +3 more potentially affected by CVE-2026-44112 via openclaw (>=0.0.1, <=2026.4.12)

openclaw NPM version =0.0.1, =0.8.7, =0.1.0, =3.3.2, =3.3.7 Source cves: CVE-2026-44112 Source advisory: MEND:CVE-2026-44112...

@chrysb/alphaclaw (>=0.8.7, <=0.9.0), vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-43584 via openclaw (>=0.0.1, <=2026.4.9)

openclaw NPM version =0.0.1, =0.8.7, =3.3.2, =3.3.7 Source cves: CVE-2026-43584 Source advisory: MEND:CVE-2026-43584...

@chrysb/alphaclaw (>=0.8.7, <=0.9.0), vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-43582 via openclaw (>=0.0.1, <=2026.4.9)

openclaw NPM version =0.0.1, =0.8.7, =3.3.2, =3.3.7 Source cves: CVE-2026-43582 Source advisory: MEND:CVE-2026-43582...

@chrysb/alphaclaw (>=0.8.7, <=0.9.0), vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-43581 via openclaw (>=0.0.1, <=2026.4.9)

openclaw NPM version =0.0.1, =0.8.7, =3.3.2, =3.3.7 Source cves: CVE-2026-43581 Source advisory: MEND:CVE-2026-43581...

@chrysb/alphaclaw (>=0.8.7, <=0.9.0), vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-43580 via openclaw (>=0.0.1, <=2026.4.9)

openclaw NPM version =0.0.1, =0.8.7, =3.3.2, =3.3.7 Source cves: CVE-2026-43580 Source advisory: MEND:CVE-2026-43580...