npm - OSV

MAL-2026-17189

npm/chai-as-relay

Malicious code in chai-as-relay (npm) 19 hours ago

No fix available

MAL-2026-17190

npm/cma-self-hosted-sandbox-cf

Malicious code in cma-self-hosted-sandbox-cf (npm) 19 hours ago

No fix available

GHSA-9gfj-28hw-jchp

npm/knowns

Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools yesterday

Fix available
Severity - 8.8 (High)

GHSA-29h2-jr22-frmh

npm/@openzeppelin/confidential-contracts

OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet yesterday

Fix available
Severity - 7.1 (High)

MAL-2026-17187

npm/@digift/cli

Malicious code in @digift/cli (npm) yesterday

No fix available

MAL-2026-17186

npm/@nubjs/types

Malicious code in @nubjs/types (npm) yesterday

No fix available

MAL-2026-17184

npm/@airbnb-extended/typescript-config

Malicious code in @airbnb-extended/typescript-config (npm) yesterday

No fix available

MAL-2026-17185

npm/shoplist-app

Malicious code in shoplist-app (npm) yesterday

No fix available

MAL-2026-17182

npm/app-sca-info-banking

Malicious code in app-sca-info-banking (npm) 2 days ago

No fix available

MAL-2026-17169

npm/@alphaspace/core

Malicious code in @alphaspace/core (npm) 2 days ago

No fix available

MAL-2026-17176

npm/n8n-nodes-moonlet-helpers

Malicious code in n8n-nodes-moonlet-helpers (npm) 2 days ago

No fix available

MAL-2026-17177

npm/n8n-nodes-moonlet-utils

Malicious code in n8n-nodes-moonlet-utils (npm) 2 days ago

No fix available

MAL-2026-17175

npm/n8n-nodes-flowstats

Malicious code in n8n-nodes-flowstats (npm) 2 days ago

No fix available

MAL-2026-17179

npm/wallet-connect-adapter

Malicious code in wallet-connect-adapter (npm) 2 days ago

No fix available

MAL-2026-17171

npm/agency-testts

Malicious code in agency-testts (npm) 2 days ago

No fix available

MAL-2026-17178

npm/secure-env3

Malicious code in secure-env3 (npm) 2 days ago

No fix available

Vulnerabilities