Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hellowornd (npm) GHSA-4f9q-ffgq-5w82, MAL-2026-4839 | Malicious | Not scored | 28 May, 2026 | npm hellowornd |
Malicious release: Malicious code in @service-suppliers/reset_country_list (npm) GHSA-84hr-mv69-vj7f, MAL-2026-4850 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/reset_country_list |
Malicious release: Malicious code in @service-suppliers/set_suppliers_loading_start (npm) GHSA-89m6-4f5j-7xj7, MAL-2026-4855 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_suppliers_loading_start |
Malicious release: Malicious code in @service-user-notifications/set_refresh_interval (npm) GHSA-9h2v-ff64-858c, MAL-2026-4858 | Malicious | Not scored | 28 May, 2026 | npm @service-user-notifications/set_refresh_interval |
Malicious release: Malicious code in @service-user-notifications/reset_notifications_not_removable (npm) GHSA-f2q4-p8r2-p7qr, MAL-2026-4857 | Malicious | Not scored | 28 May, 2026 | npm @service-user-notifications/reset_notifications_not_removable |
Malicious release: Malicious code in @service-suppliers/set_suppliers_data (npm) GHSA-jpvq-j8hv-vf64, MAL-2026-4854 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_suppliers_data |
Malicious release: Malicious code in @service-suppliers/set_suppliers_loading_stop (npm) GHSA-mh37-355g-cwf5, MAL-2026-4856 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_suppliers_loading_stop |
Malicious release: Malicious code in @service-suppliers/set_selected_supplier_action_saga (npm) GHSA-v5p9-2r35-4xf9, MAL-2026-4853 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_selected_supplier_action_saga |
Malicious release: Malicious code in @service-suppliers/set_country_list (npm) GHSA-w4v4-3hx5-qm6x, MAL-2026-4851 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_country_list |
Malicious release: Malicious code in @service-suppliers/set_initial_loaded (npm) GHSA-w965-p32r-r94f, MAL-2026-4852 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_initial_loaded |
Malicious release: Malicious code in @service-suppliers/fetch-suppliers-watcher-saga (npm) GHSA-f638-f27j-mwxw, MAL-2026-4847 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch-suppliers-watcher-saga |
Malicious release: Malicious code in @polka-ui/loads (npm) GHSA-f6p3-64q3-f7m2, MAL-2026-4843 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/loads |
Malicious release: Malicious code in @hcs-hybrid/uirouter-core (npm) GHSA-j5c6-cvw9-pvw5, MAL-2026-4841 | Malicious | Not scored | 28 May, 2026 | npm @hcs-hybrid/uirouter-core |
Malicious release: Malicious code in @polka-ui/recoc (npm) GHSA-jfp7-28fm-4363, MAL-2026-4845 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/recoc |
Malicious release: Malicious code in @polka-ui/reco (npm) GHSA-jp28-c5rf-vp9c, MAL-2026-4844 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/reco |
Malicious release: Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm) GHSA-r54g-7f23-p3xr, MAL-2026-4846 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch-initial-suppliers-watcher-saga |
Malicious release: Malicious code in @polka-ui/configuration (npm) GHSA-r7px-75rx-x9r7, MAL-2026-4842 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/configuration |
Malicious release: Malicious code in @bcs-bank-complex-ui/deeplink (npm) GHSA-w552-5pj3-2xrg, MAL-2026-4840 | Malicious | Not scored | 28 May, 2026 | npm @bcs-bank-complex-ui/deeplink |
Malicious release: Malicious code in @service-suppliers/fetch_initial_suppliers_action_saga (npm) GHSA-w5vj-vfr4-3hjw, MAL-2026-4848 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch_initial_suppliers_action_saga |
Malicious release: Malicious code in @service-suppliers/fetch_suppliers_country_list_action_saga (npm) GHSA-www8-35vq-694c, MAL-2026-4849 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch_suppliers_country_list_action_saga |
Malicious release: Malicious code in justsaying-docs (npm) MAL-2026-4838 | Malicious | Not scored | 28 May, 2026 | npm justsaying-docs |
Malicious release: Malicious code in my-test-package-2025-xyz (PyPI) MAL-2026-4837 | Malicious | Not scored | 28 May, 2026 | PyPI my-test-package-2025-xyz |
Malicious release: Malicious code in nemo-reporter (npm) GHSA-358g-x45v-57vw, MAL-2026-4836 | Malicious | Not scored | 28 May, 2026 | npm nemo-reporter |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-s3-storage (npm) GHSA-228p-vq38-23gh, MAL-2026-4988 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-s3-storage |
Malicious release: Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent (npm) GHSA-2429-p3v5-m6p7, MAL-2026-4933 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/ml-ai-agents-agent |
Malicious release: Malicious code in @cloudplatform-single-spa/dataplatform (npm) GHSA-2m8v-gg54-p274, MAL-2026-4903 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/dataplatform |
Malicious release: Malicious code in @cloudplatform-single-spa/cp-api-gw (npm) GHSA-37f8-7crp-99x7, MAL-2026-4901 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/cp-api-gw |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-interfaces (npm) GHSA-3h4q-c5w7-j6c3, MAL-2026-4984 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-interfaces |
Malicious release: Malicious code in @cloudplatform-single-spa/business-solutions (npm) GHSA-5r3c-vc42-xhw6, MAL-2026-4893 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/business-solutions |
Malicious release: Malicious code in @cloudplatform-single-spa/cnapp-ui (npm) GHSA-5wwp-555m-83g9, MAL-2026-4898 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/cnapp-ui |
Malicious release: Malicious code in @cloudplatform-single-spa/support (npm) GHSA-7wmg-h7hh-5m93, MAL-2026-4975 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/support |
Malicious release: Malicious code in @cloudplatform-single-spa/ssh-keys (npm) GHSA-7xjw-q57c-jjh9, MAL-2026-4972 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/ssh-keys |
Malicious release: Malicious code in @cloudplatform-single-spa/administration (npm) GHSA-7xpr-9xh5-m6q7, MAL-2026-4882 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/administration |
Malicious release: Malicious code in @cloudplatform-single-spa/enterprise (npm) GHSA-c5c8-wmww-wg89, MAL-2026-4918 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/enterprise |
Malicious release: Malicious code in @cloudplatform-single-spa/dataplatform-trino (npm) GHSA-f5qc-x39h-934p, MAL-2026-4912 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/dataplatform-trino |
Malicious release: Malicious code in @cloudplatform-single-spa/arenadata-db (npm) GHSA-f8cm-fp35-2mcm, MAL-2026-4888 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/arenadata-db |
Malicious release: Malicious code in @cloudplatform-single-spa/employees (npm) GHSA-fmpf-r7qq-q7jh, MAL-2026-4917 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/employees |
Malicious release: Malicious code in @cloudplatform-single-spa/logaas (npm) GHSA-gpjw-27xh-6659, MAL-2026-4926 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/logaas |
Malicious release: Malicious code in @cloudplatform-single-spa/dataplatform-metastore (npm) GHSA-hvp4-8357-fcrc, MAL-2026-4909 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/dataplatform-metastore |
Malicious release: Malicious code in @cloudplatform-single-spa/monitoring (npm) GHSA-jvj5-w453-mjrh, MAL-2026-4952 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/monitoring |
Malicious release: Malicious code in @cloudplatform-single-spa/cloud-dns (npm) GHSA-p4x7-2fvx-ff2j, MAL-2026-4896 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/cloud-dns |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-baas (npm) GHSA-pjmq-qghr-v939, MAL-2026-4978 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-baas |
Malicious release: Malicious code in @cloudplatform-single-spa/marketplace-gigachat (npm) GHSA-pxw8-gqv6-95gx, MAL-2026-4931 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/marketplace-gigachat |
Malicious release: Malicious code in @cloudplatform-single-spa/base-static-page (npm) GHSA-qv4g-5wcg-6j6p, MAL-2026-4891 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/base-static-page |
Malicious release: Malicious code in @cloudplatform-single-spa/datagrid (npm) GHSA-rfjw-rc5v-6jwg, MAL-2026-4902 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/datagrid |
Malicious release: Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent-system (npm) GHSA-rh4m-xhvc-mp3x, MAL-2026-4934 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/ml-ai-agents-agent-system |
Malicious release: Malicious code in @cloudplatform-single-spa/floating-ips (npm) GHSA-vwr2-jj39-m3fp, MAL-2026-4922 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/floating-ips |
Malicious release: Malicious code in @cloudplatform-single-spa/vpn (npm) GHSA-x7v5-6q4v-272p, MAL-2026-5003 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vpn |
Malicious release: Malicious code in @cloudplatform-single-spa/security-groups (npm) GHSA-xx66-78cf-7927, MAL-2026-4967 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/security-groups |
Malicious release: Malicious code in @car-loans/applicaion-aff (npm) MAL-2026-4863 | Malicious | Not scored | 28 May, 2026 | npm @car-loans/applicaion-aff |