Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-16297
  • npm/keroeltop
Malicious code in keroeltop (npm) 20 hours ago
  • No fix available
MAL-2026-16292
  • npm/@shared-web/utils
Malicious code in @shared-web/utils (npm) 23 hours ago
  • No fix available
MAL-2026-16293
  • npm/chai-as-indexed
Malicious code in chai-as-indexed (npm) 23 hours ago
  • No fix available
MAL-2026-16290
  • npm/@insiderintelligence/googleadmanager
Malicious code in @insiderintelligence/googleadmanager (npm) 23 hours ago
  • No fix available
MAL-2026-16295
  • npm/tailwindcss-forms-ui
Malicious code in tailwindcss-forms-ui (npm) 23 hours ago
  • No fix available
MAL-2026-16291
  • npm/@shared-runtime/modules
Malicious code in @shared-runtime/modules (npm) 23 hours ago
  • No fix available
MAL-2026-16294
  • npm/internallib_v949
Malicious code in internallib_v949 (npm) 23 hours ago
  • No fix available
GHSA-3753-m2x2-q623
  • npm/@file-viewer/doc
  • npm/msdoc-viewer
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer yesterday
  • Fix available
  • Severity - 8.2 (High)
GHSA-7q85-xj36-vmfc
  • npm/adm-zip
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) yesterday
  • Fix available
  • Severity - 7.5 (High)
GHSA-3rm2-h79c-8qw6
  • npm/md-editor-v3
md-editor-v3: XSS via fenced-code language rendering bypass yesterday
  • Fix available
  • Severity - 6.1 (Medium)
MAL-2026-16287
  • npm/openmct-heatmap
Malicious code in openmct-heatmap (npm) yesterday
  • No fix available
MAL-2026-16288
  • npm/test89-auth
Malicious code in test89-auth (npm) yesterday
  • No fix available
MAL-2026-16289
  • npm/test890-auth
Malicious code in test890-auth (npm) yesterday
  • No fix available
MAL-2026-16286
  • npm/test8999-auth
Malicious code in test8999-auth (npm) yesterday
  • No fix available
MAL-2026-16285
  • npm/test899-auth
Malicious code in test899-auth (npm) yesterday
  • No fix available
MAL-2026-16283
  • npm/@shared-web/assets
Malicious code in @shared-web/assets (npm) yesterday
  • No fix available