Lucene search
+L
Osv MalRecent

239659 matches found

osv_mal
osv_mal
•added 2026/08/04 3:28 p.m.•22 views

MAL-2026-11827 Malicious code in @servicetitan/anvil2-ext-mwv (npm)

npm/@servicetitan/anvil2-ext-mwv is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:28 p.m.•21 views

MAL-2026-11841 Malicious code in @servicetitan/contentful (npm)

npm/@servicetitan/contentful is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•19 views

MAL-2026-11858 Malicious code in @servicetitan/eh-module-communication (npm)

npm/@servicetitan/eh-module-communication is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojaniz...

5.6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•17 views

MAL-2026-11951 Malicious code in @servicetitan/widget-platform-monolith (npm)

npm/@servicetitan/widget-platform-monolith is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

6.4AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•22 views

MAL-2026-11821 Malicious code in @servicetitan/anvil-token (npm)

npm/@servicetitan/anvil-token is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•25 views

MAL-2026-11911 Malicious code in @servicetitan/quick-actions (npm)

npm/@servicetitan/quick-actions is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.2AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•17 views

MAL-2026-11878 Malicious code in @servicetitan/html-sketchapp (npm)

npm/@servicetitan/html-sketchapp is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.3AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•23 views

MAL-2026-11895 Malicious code in @servicetitan/marketing-route (npm)

npm/@servicetitan/marketing-route is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.1AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•20 views

MAL-2026-11882 Malicious code in @servicetitan/kendo-theme (npm)

npm/@servicetitan/kendo-theme is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•23 views

MAL-2026-11864 Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm)

npm/@servicetitan/eslint-plugin-mobx-6 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

5.7AI score
SaveExploits0References11
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•37 views

MAL-2026-11924 Malicious code in @servicetitan/startup-jest (npm)

npm/@servicetitan/startup-jest is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•24 views

MAL-2026-11837 Malicious code in @servicetitan/carto-tokens (npm)

npm/@servicetitan/carto-tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•26 views

MAL-2026-11926 Malicious code in @servicetitan/startup-utils (npm)

npm/@servicetitan/startup-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•21 views

MAL-2026-11892 Malicious code in @servicetitan/marketing-form (npm)

npm/@servicetitan/marketing-form is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•27 views

MAL-2026-11912 Malicious code in @servicetitan/react-hooks (npm)

npm/@servicetitan/react-hooks is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•24 views

MAL-2026-11991 Malicious code in verdaccio-tarball-local-storage (npm)

npm/verdaccio-tarball-local-storage is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6AI score
SaveExploits0References21
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•17 views

MAL-2026-11893 Malicious code in @servicetitan/marketing-global-route (npm)

npm/@servicetitan/marketing-global-route is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanize...

6.2AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•20 views

MAL-2026-11855 Malicious code in @servicetitan/document-title (npm)

npm/@servicetitan/document-title is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•25 views

MAL-2026-11990 Malicious code in verdaccio-okta-oauth (npm)

npm/verdaccio-okta-oauth is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

5.8AI score
SaveExploits0References21
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•19 views

MAL-2026-11898 Malicious code in @servicetitan/measure-sheet-data (npm)

npm/@servicetitan/measure-sheet-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized an...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•15 views

MAL-2026-11660 Malicious code in @onereach/ui-components (npm)

npm/@onereach/ui-components is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•20 views

MAL-2026-11617 Malicious code in @onereach/orest-vue-demi-vue2 (npm)

npm/@onereach/orest-vue-demi-vue2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•23 views

MAL-2026-11853 Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)

npm/@servicetitan/docs-anvil-uikit-contrib is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

6.5AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:27 p.m.•22 views

MAL-2026-11608 Malicious code in @onereach/or-browser (npm)

npm/@onereach/or-browser is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

5.7AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•27 views

MAL-2026-11604 Malicious code in @onereach/idw-sdk (npm)

npm/@onereach/idw-sdk is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

6.6AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•21 views

MAL-2026-11881 Malicious code in @servicetitan/json-render-react (npm)

npm/@servicetitan/json-render-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•23 views

MAL-2026-11863 Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)

npm/@servicetitan/eslint-plugin-folder-schema is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•16 views

MAL-2026-11886 Malicious code in @servicetitan/ld-type-generator (npm)

npm/@servicetitan/ld-type-generator is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•28 views

MAL-2026-11601 Malicious code in @onereach/idw-apps (npm)

npm/@onereach/idw-apps is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

5.9AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•16 views

MAL-2026-11946 Malicious code in @servicetitan/uikit-docs (npm)

npm/@servicetitan/uikit-docs is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•17 views

MAL-2026-11876 Malicious code in @servicetitan/hash-browser-router (npm)

npm/@servicetitan/hash-browser-router is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

5.9AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•20 views

MAL-2026-11922 Malicious code in @servicetitan/standalone-ui (npm)

npm/@servicetitan/standalone-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•25 views

MAL-2026-11712 Malicious code in @or-sdk/markdowner (npm)

npm/@or-sdk/markdowner is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

5.7AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•16 views

MAL-2026-11838 Malicious code in @servicetitan/component-usage (npm)

npm/@servicetitan/component-usage is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:26 p.m.•23 views

MAL-2026-11619 Malicious code in @onereach/orest-vue3 (npm)

npm/@onereach/orest-vue3 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

6.3AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•19 views

MAL-2026-11857 Malicious code in @servicetitan/dte-unlayer (npm)

npm/@servicetitan/dte-unlayer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.5AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•24 views

MAL-2026-11908 Malicious code in @servicetitan/navigation (npm)

npm/@servicetitan/navigation is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.3AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•24 views

MAL-2026-11913 Malicious code in @servicetitan/react-ioc (npm)

npm/@servicetitan/react-ioc is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•35 views

MAL-2026-11851 Malicious code in @servicetitan/datetime-utils (npm)

npm/@servicetitan/datetime-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.5AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•20 views

MAL-2026-11666 Malicious code in @or-sdk/accounts (npm)

npm/@or-sdk/accounts is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

5.9AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•21 views

MAL-2026-11839 Malicious code in @servicetitan/confirm (npm)

npm/@servicetitan/confirm is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•28 views

MAL-2026-11843 Malicious code in @servicetitan/cp-api (npm)

npm/@servicetitan/cp-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

5.6AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•25 views

MAL-2026-11915 Malicious code in @servicetitan/restrict-imports (npm)

npm/@servicetitan/restrict-imports is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•17 views

MAL-2026-11677 Malicious code in @or-sdk/bot-templates (npm)

npm/@or-sdk/bot-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

5.6AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•23 views

MAL-2026-11840 Malicious code in @servicetitan/confirm-navigation (npm)

npm/@servicetitan/confirm-navigation is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized an...

5.8AI score
SaveExploits0References12
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•22 views

MAL-2026-11638 Malicious code in @onereach/si-dropdown-simple (npm)

npm/@onereach/si-dropdown-simple is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•17 views

MAL-2026-11701 Malicious code in @or-sdk/idw-skill (npm)

npm/@or-sdk/idw-skill is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.8AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•20 views

MAL-2026-11675 Malicious code in @or-sdk/billing (npm)

npm/@or-sdk/billing is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

5.8AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•18 views

MAL-2026-11680 Malicious code in @or-sdk/cards (npm)

npm/@or-sdk/cards is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

6AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/08/04 3:25 p.m.•24 views

MAL-2026-11612 Malicious code in @onereach/or-pro (npm)

npm/@onereach/or-pro is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

5.8AI score
SaveExploits0References8
Total number of security vulnerabilities239659