VDB

GCVE-VVD-OSM-2026-57

GCVE-VVD-OSM-2026-57
Advisory PublishedCVSS 5.4/10
Vulnetix · Advisory published March 26, 2026
Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration, network activity, install-time execution. Key findings: - OAST/Interactsh Exfiltration in package.json: ".oast.pro" - Suspicious Domain in package.json: "http://7ddb2b753341353f11f9guptg9wyyyyyb.oast" IOCs: - urls: http://7ddb2b753341353f11f9guptg9wyyyyyb.oast.pro - domains: 7ddb2b753341353f11f9guptg9wyyyyyb.oast.pro
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersionsPlatforms
unknownyelp-react-component-photo-uploadall (affected), all (affected), all (affected), all (affected), all (affected), all (affected)—
unknownwoltpickerappall (affected), all (affected), all (affected), all (affected), all (affected), all (affected), all (affected), all (affected)—
unknowntailwind-font-interall (affected)—

Aliases

MAL-2026-1973MAL-2026-2135MAL-2026-2111

Transitive aliases

GHSA-64p5-3wp7-v4c9GHSA-xmfj-5j3f-gx7xVVD-OSM-2026-584GHSA-jffg-8cwf-786hVVD-OSM-2026-58GHSA-8vmq-w85q-4q4jVVD-OSM-2026-682VVD-OSM-2026-695VVD-OSM-2026-201GHSA-jrpm-f5xg-3frjVVD-OSM-2026-21MAL-2026-1090MAL-2026-1937VVD-OSM-2026-581MAL-2026-2091VVD-OSM-2026-74MAL-2026-1927VVD-OSM-2026-92GHSA-r54j-4cj8-jf2vGHSA-cxvr-pcxc-6r58VVD-OSM-2026-245GHSA-g4q9-p378-mc3gVVD-OSM-2026-126MAL-2026-2110VVD-OSM-2026-204VVD-OSM-2026-105VVD-OSM-2026-614VVD-OSM-2026-226MAL-2026-1422GHSA-p5gg-75q6-vp64VVD-OSM-2026-80VVD-OSM-2026-262GHSA-7x8p-2g3v-pwqpVVD-OSM-2026-130MAL-2026-2191MAL-2026-1998GHSA-9xfj-83q4-hxj6VVD-OSM-2026-44VVD-OSM-2026-627MAL-2026-1240VVD-OSM-2026-13MAL-2026-2181GHSA-j836-pcqv-w9c9MAL-2026-2239MAL-2026-2015GHSA-82f5-93r9-hhwqVVD-OSM-2026-220VVD-OSM-2026-249GHSA-28w8-cpp5-g448GHSA-5g2c-h3r8-6w3gMAL-2026-1411VVD-OSM-2026-146MAL-2026-1263MAL-2026-2241MAL-2026-2080GHSA-pjxj-7mxh-9348GHSA-mrwh-gr28-36wvGHSA-fp44-gpc5-cc43VVD-OSM-2026-646GHSA-8g7v-w2f5-7gw2MAL-2026-1280MAL-2026-1582GHSA-36wg-c889-h26jVVD-OSM-2026-708MAL-2026-2005VVD-OSM-2026-102MAL-2026-2126VVD-OSM-2026-548GHSA-rjc8-xw63-3j4jGHSA-74r2-ggvc-h778MAL-2026-2221VVD-OSM-2026-46MAL-2026-1925GHSA-7r3j-rgcw-3jgqGHSA-24fv-r862-wg4cGHSA-87mp-vrm9-h8r5VVD-OSM-2026-653VVD-OSM-2026-50VVD-OSM-2026-207VVD-OSM-2026-568MAL-2026-2176VVD-OSM-2026-645VVD-OSM-2026-215GHSA-fr84-v3mx-mr9xVVD-OSM-2026-223VVD-OSM-2026-535MAL-2026-1565MAL-2026-1035GHSA-cv8h-5j9m-x3rcVVD-OSM-2026-550GHSA-x6m2-63j5-v6c7GHSA-fr9v-hm5m-rv52MAL-2026-1044VVD-OSM-2026-655VVD-OSM-2026-578MAL-2026-1431GHSA-wwjg-c6fp-6648VVD-OSM-2026-97VVD-OSM-2026-181VVD-OSM-2026-707GHSA-2phg-9x97-9759VVD-OSM-2026-629VVD-OSM-2026-200MAL-2026-1080VVD-OSM-2026-616VVD-OSM-2026-607VVD-OSM-2026-643GHSA-gmxq-2g92-63xvVVD-OSM-2026-20VVD-OSM-2026-725VVD-OSM-2026-127MAL-2026-1584MAL-2026-1963VVD-OSM-2026-641VVD-OSM-2026-633GHSA-7qgj-3cfq-g4g4VVD-OSM-2026-218MAL-2026-2037VVD-OSM-2026-94VVD-OSM-2026-579MAL-2026-1276MAL-2026-1543MAL-2026-1225VVD-OSM-2026-255VVD-OSM-2026-701VVD-OSM-2026-210VVD-OSM-2026-22VVD-OSM-2026-577VVD-OSM-2026-182VVD-OSM-2026-26VVD-OSM-2026-15VVD-OSM-2026-136MAL-2026-1498VVD-OSM-2026-710VVD-OSM-2026-179GHSA-2gfq-7ff6-3mr7MAL-2026-1581VVD-OSM-2026-135MAL-2026-1544VVD-OSM-2026-248MAL-2026-1995VVD-OSM-2026-728MAL-2026-2095VVD-OSM-2026-60VVD-OSM-2026-630VVD-OSM-2026-709VVD-OSM-2026-63VVD-OSM-2026-540MAL-2026-2222MAL-2026-1099GHSA-c5x7-f6qj-gc77VVD-OSM-2026-143VVD-OSM-2026-164VVD-OSM-2026-152VVD-OSM-2026-699VVD-OSM-2026-238VVD-OSM-2026-588VVD-OSM-2026-172GHSA-jfqc-55rq-mm3jVVD-OSM-2026-155GHSA-jcwx-28x8-jf6fGHSA-82fx-cjgq-fc8vMAL-2026-1019GHSA-mg5x-ww4x-j322MAL-2026-2032MAL-2026-1224MAL-2026-1568GHSA-9m98-jvf5-jxx5VVD-OSM-2026-534VVD-OSM-2026-676VVD-OSM-2026-157MAL-2026-2101MAL-2026-1567VVD-OSM-2026-56MAL-2026-1979MAL-2026-2186MAL-2026-1283VVD-OSM-2026-685VVD-OSM-2026-42VVD-OSM-2026-649VVD-OSM-2026-212VVD-OSM-2026-119MAL-2026-1521GHSA-6rj6-xwm6-v698VVD-OSM-2026-270VVD-OSM-2026-730MAL-2026-2087VVD-OSM-2026-670VVD-OSM-2026-659MAL-2026-1946VVD-OSM-2026-724MAL-2026-1289VVD-OSM-2026-158VVD-OSM-2026-225VVD-OSM-2026-53VVD-OSM-2026-555MAL-2026-2002MAL-2026-2229MAL-2026-2206GHSA-q4j2-j63f-5vqxVVD-OSM-2026-606VVD-OSM-2026-30VVD-OSM-2026-116VVD-OSM-2026-93GHSA-f6pq-884h-rjxqMAL-2026-1371MAL-2026-2076VVD-OSM-2026-240VVD-OSM-2026-542MAL-2026-1931MAL-2026-1577MAL-2026-1098VVD-OSM-2026-170VVD-OSM-2026-260VVD-OSM-2026-76MAL-2026-1934MAL-2026-1968MAL-2026-2086VVD-OSM-2026-96MAL-2026-1290VVD-OSM-2026-675MAL-2026-2077VVD-OSM-2026-632MAL-2026-1570VVD-OSM-2026-67VVD-OSM-2026-679VVD-OSM-2026-712VVD-OSM-2026-28MAL-2026-2053MAL-2026-2200VVD-OSM-2026-7MAL-2026-1948VVD-OSM-2026-702VVD-OSM-2026-594VVD-OSM-2026-228VVD-OSM-2026-72MAL-2026-2184VVD-OSM-2026-705GHSA-q46m-r8wj-v4p9MAL-2026-2242MAL-2026-2179VVD-OSM-2026-263MAL-2026-2123VVD-OSM-2026-148GHSA-h29v-mffh-vf54VVD-OSM-2026-176VVD-OSM-2026-71VVD-OSM-2026-585VVD-OSM-2026-187VVD-OSM-2026-149GHSA-7fpm-p46r-h37gVVD-OSM-2026-114VVD-OSM-2026-193MAL-2026-1091MAL-2026-2167VVD-OSM-2026-107MAL-2026-1940MAL-2026-2243VVD-OSM-2026-704VVD-OSM-2026-129MAL-2026-1987VVD-OSM-2026-253VVD-OSM-2026-10MAL-2026-1939MAL-2026-1957GHSA-7v3c-wxfg-x5fgVVD-OSM-2026-613MAL-2026-1412VVD-OSM-2026-624GHSA-gv85-mrvr-pgchMAL-2026-1938MAL-2026-1351VVD-OSM-2026-721GHSA-hqj8-x2vp-mrp9MAL-2026-2085MAL-2026-1969VVD-OSM-2026-55VVD-OSM-2026-153VVD-OSM-2026-692VVD-OSM-2026-562VVD-OSM-2026-561VVD-OSM-2026-264MAL-2026-1932VVD-OSM-2026-674VVD-OSM-2026-669GHSA-f582-qpjg-gx9hVVD-OSM-2026-196MAL-2026-1964VVD-OSM-2026-563GHSA-vf6p-p33f-3cjvMAL-2026-2168VVD-OSM-2026-89GHSA-39vv-2g62-pp83MAL-2026-2197MAL-2026-1142VVD-OSM-2026-266VVD-OSM-2026-12MAL-2026-1281MAL-2026-1974MAL-2026-1949MAL-2026-2217GHSA-7fr9-gw6v-q3mwGHSA-767f-p685-mw32MAL-2026-2098GHSA-r27q-f5jw-j5jpMAL-2026-2248VVD-OSM-2026-233MAL-2026-2240VVD-OSM-2026-54MAL-2026-2203VVD-OSM-2026-256VVD-OSM-2026-258VVD-OSM-2026-216MAL-2026-2224VVD-OSM-2026-112VVD-OSM-2026-25GHSA-q93m-663h-q987GHSA-42g4-g458-9wx9MAL-2026-2132VVD-OSM-2026-98VVD-OSM-2026-572MAL-2026-1499VVD-OSM-2026-167VVD-OSM-2026-88MAL-2026-1580VVD-OSM-2026-121MAL-2026-1064VVD-OSM-2026-133VVD-OSM-2026-605VVD-OSM-2026-222VVD-OSM-2026-731VVD-OSM-2026-601VVD-OSM-2026-33MAL-2026-2235GHSA-8328-7r2v-2fq6GHSA-gfm3-3p4f-m57wVVD-OSM-2026-23MAL-2026-1092GHSA-x2c8-m9xp-3qmvMAL-2026-2155VVD-OSM-2026-169VVD-OSM-2026-660GHSA-3hr5-9jhx-97c5MAL-2026-2089MAL-2026-1341VVD-OSM-2026-145MAL-2026-1992VVD-OSM-2026-197VVD-OSM-2026-188VVD-OSM-2026-139MAL-2026-2233VVD-OSM-2026-27MAL-2026-2199MAL-2026-1538VVD-OSM-2026-154VVD-OSM-2026-90VVD-OSM-2026-213GHSA-fgvm-3g6v-ppjfVVD-OSM-2026-716VVD-OSM-2026-565GHSA-6vcv-6xjg-jm7wMAL-2026-1960GHSA-3qmv-2h4m-5qg9VVD-OSM-2026-647GHSA-m6hv-9gh4-4c85VVD-OSM-2026-47VVD-OSM-2026-593VVD-OSM-2026-235VVD-OSM-2026-628GHSA-p7pv-mfpq-4rfgVVD-OSM-2026-3MAL-2026-1954GHSA-44fq-5mh8-r5hgMAL-2026-2127VVD-OSM-2026-61MAL-2026-2174VVD-OSM-2026-558VVD-OSM-2026-261VVD-OSM-2026-38MAL-2026-2134MAL-2026-2157VVD-OSM-2026-217VVD-OSM-2026-636VVD-OSM-2026-715MAL-2026-1222VVD-OSM-2026-639VVD-OSM-2026-619MAL-2026-1350MAL-2026-1583VVD-OSM-2026-717VVD-OSM-2026-237GHSA-wgjr-2vhj-qwv7VVD-OSM-2026-658MAL-2026-1530GHSA-9mp5-2jp4-wmwwMAL-2026-1088MAL-2026-1988GHSA-p4gv-m838-2xq9GHSA-mgm3-4q53-38p5MAL-2026-2160MAL-2026-2125VVD-OSM-2026-84VVD-OSM-2026-69MAL-2026-1432GHSA-ppr8-pvc2-8f99VVD-OSM-2026-141VVD-OSM-2026-230VVD-OSM-2026-229MAL-2026-2164VVD-OSM-2026-104VVD-OSM-2026-254VVD-OSM-2026-635MAL-2026-2223VVD-OSM-2026-722GHSA-fppj-8rcf-8fppVVD-OSM-2026-190MAL-2026-2064VVD-OSM-2026-131VVD-OSM-2026-576GHSA-qw8c-w97q-7p7pVVD-OSM-2026-612GHSA-f6jh-hc8p-xpfxVVD-OSM-2026-34VVD-OSM-2026-667VVD-OSM-2026-16VVD-OSM-2026-247GHSA-4h33-vfc6-f2hhVVD-OSM-2026-272VVD-OSM-2026-694VVD-OSM-2026-642VVD-OSM-2026-186MAL-2026-2011VVD-OSM-2026-656VVD-OSM-2026-137VVD-OSM-2026-142VVD-OSM-2026-8MAL-2026-1029MAL-2026-2187MAL-2026-2003MAL-2026-1294VVD-OSM-2026-31MAL-2026-1261MAL-2026-2000GHSA-8f57-hh49-gmqfVVD-OSM-2026-236MAL-2026-2131VVD-OSM-2026-610VVD-OSM-2026-224VVD-OSM-2026-168GHSA-347h-frw7-j9f5MAL-2026-1980VVD-OSM-2026-654GHSA-gmvg-736c-7g9fMAL-2026-1935MAL-2026-1527MAL-2026-2196VVD-OSM-2026-5VVD-OSM-2026-100MAL-2026-2204VVD-OSM-2026-66VVD-OSM-2026-43MAL-2026-2154MAL-2026-1965MAL-2026-1563VVD-OSM-2026-600VVD-OSM-2026-156VVD-OSM-2026-604GHSA-34h2-gr5g-vc3jMAL-2026-2189GHSA-jhvp-qr9c-qg9pVVD-OSM-2026-110VVD-OSM-2026-4VVD-OSM-2026-75VVD-OSM-2026-541MAL-2026-2105VVD-OSM-2026-219VVD-OSM-2026-45MAL-2026-2061VVD-OSM-2026-109MAL-2026-1971VVD-OSM-2026-134VVD-OSM-2026-214VVD-OSM-2026-40MAL-2026-2161VVD-OSM-2026-596VVD-OSM-2026-599VVD-OSM-2026-36VVD-OSM-2026-117VVD-OSM-2026-242MAL-2026-2047GHSA-x8xx-3mj7-337xVVD-OSM-2026-727VVD-OSM-2026-597MAL-2026-1479VVD-OSM-2026-538MAL-2026-2185VVD-OSM-2026-183VVD-OSM-2026-78VVD-OSM-2026-657GHSA-f46r-3xg5-w2wmGHSA-6mrh-fqgr-9x68MAL-2026-1241MAL-2026-2008MAL-2026-1278GHSA-cqxq-2582-f357VVD-OSM-2026-603VVD-OSM-2026-159VVD-OSM-2026-81VVD-OSM-2026-564GHSA-86xp-4fvm-qm2pGHSA-2273-pvh3-9x6jVVD-OSM-2026-591VVD-OSM-2026-556MAL-2026-2190MAL-2026-2192MAL-2026-1482VVD-OSM-2026-711MAL-2026-1943MAL-2026-1955GHSA-rm67-f2rf-9fwfMAL-2026-1942MAL-2026-1097MAL-2026-1496VVD-OSM-2026-536MAL-2026-2073MAL-2026-1286GHSA-2rj8-6crh-98qqVVD-OSM-2026-86GHSA-h2h6-q29m-3mm3GHSA-887f-wrq6-j685GHSA-mwq7-2fm8-vc4qMAL-2026-1569GHSA-4p9p-g69r-jxv8VVD-OSM-2026-162MAL-2026-1529MAL-2026-1378GHSA-5xq6-c5wc-f6x9GHSA-5w5v-cvxh-55vqVVD-OSM-2026-666MAL-2026-2245MAL-2026-1561VVD-OSM-2026-191VVD-OSM-2026-723MAL-2026-1966VVD-OSM-2026-122GHSA-f8qc-h6gw-x2vmGHSA-6w26-75vp-gf97VVD-OSM-2026-211VVD-OSM-2026-571MAL-2026-1970GHSA-j74c-w64f-9wg5MAL-2026-1573VVD-OSM-2026-120MAL-2026-2007VVD-OSM-2026-244GHSA-7w6q-gfxv-393vVVD-OSM-2026-73VVD-OSM-2026-590VVD-OSM-2026-206VVD-OSM-2026-554GHSA-38c4-cmg5-vpvcMAL-2026-1524MAL-2026-2166VVD-OSM-2026-77MAL-2026-1533VVD-OSM-2026-644GHSA-6jrx-v84r-9g5mVVD-OSM-2026-620VVD-OSM-2026-552VVD-OSM-2026-557MAL-2026-1437VVD-OSM-2026-70VVD-OSM-2026-232VVD-OSM-2026-549VVD-OSM-2026-17VVD-OSM-2026-51VVD-OSM-2026-35VVD-OSM-2026-567VVD-OSM-2026-580MAL-2026-2082GHSA-4xcw-mhqm-x332MAL-2026-2001VVD-OSM-2026-547GHSA-52w3-g4x3-xw3hGHSA-jq28-7779-5hp9GHSA-m7hw-fgmf-jwhrVVD-OSM-2026-543MAL-2026-2074VVD-OSM-2026-82VVD-OSM-2026-48MAL-2026-1947VVD-OSM-2026-648VVD-OSM-2026-257MAL-2026-2244MAL-2026-1291VVD-OSM-2026-609GHSA-hmv2-22ff-cxh8VVD-OSM-2026-537VVD-OSM-2026-574MAL-2026-2219MAL-2026-1295VVD-OSM-2026-671VVD-OSM-2026-551MAL-2026-1562GHSA-7hf8-rm28-2rm8VVD-OSM-2026-703VVD-OSM-2026-634GHSA-3qf5-vfww-7p7gGHSA-r934-qgg3-v7fgVVD-OSM-2026-52GHSA-vvwp-x2vx-wxpfGHSA-w977-mj56-jpc7MAL-2026-1950MAL-2026-2060MAL-2026-1972GHSA-9jg5-g7r5-p9f9VVD-OSM-2026-680VVD-OSM-2026-662VVD-OSM-2026-533VVD-OSM-2026-147GHSA-xq57-xcgm-9q8qGHSA-wcrr-xhm3-j3x9VVD-OSM-2026-559VVD-OSM-2026-252VVD-OSM-2026-611VVD-OSM-2026-615VVD-OSM-2026-202VVD-OSM-2026-198MAL-2026-2246GHSA-fm43-2f72-p329MAL-2026-2198MAL-2026-2226VVD-OSM-2026-598VVD-OSM-2026-688GHSA-jvrr-w8mr-28hpVVD-OSM-2026-175MAL-2026-2153MAL-2026-2207VVD-OSM-2026-9VVD-OSM-2026-140MAL-2026-1089VVD-OSM-2026-101VVD-OSM-2026-586MAL-2026-2102VVD-OSM-2026-638VVD-OSM-2026-29MAL-2026-1575MAL-2026-2247MAL-2026-1557MAL-2026-1084GHSA-2rjv-fxjc-xwmvVVD-OSM-2026-41GHSA-xqxf-c9jr-8wx6MAL-2026-1945GHSA-qxf6-x9c5-qxr4VVD-OSM-2026-11VVD-OSM-2026-668VVD-OSM-2026-111VVD-OSM-2026-108VVD-OSM-2026-570MAL-2026-2234GHSA-3qf9-476p-8j7fMAL-2026-2228GHSA-4wgw-h2cc-rpv6GHSA-r8j3-m86x-q66xMAL-2026-1572MAL-2026-1406MAL-2026-1566GHSA-hc54-whg7-r7g2VVD-OSM-2026-652GHSA-f8cx-966c-8x2hMAL-2026-1436VVD-OSM-2026-560VVD-OSM-2026-689VVD-OSM-2026-124VVD-OSM-2026-251VVD-OSM-2026-729GHSA-8cpf-9rj8-q68mVVD-OSM-2026-271MAL-2026-1325MAL-2026-2040GHSA-4gc2-gg24-6qf6VVD-OSM-2026-6VVD-OSM-2026-250VVD-OSM-2026-602MAL-2026-2169MAL-2026-1277MAL-2026-1049GHSA-f9m8-w27f-mxr3VVD-OSM-2026-180MAL-2026-1140VVD-OSM-2026-68MAL-2026-1409VVD-OSM-2026-621MAL-2026-1235MAL-2026-1997VVD-OSM-2026-83MAL-2026-1559GHSA-hpqp-f9r8-f725MAL-2026-2162VVD-OSM-2026-65MAL-2026-1223GHSA-jmx7-4g26-qp86MAL-2026-1136GHSA-53rc-g3gw-946rMAL-2026-1978MAL-2026-2088MAL-2026-1564VVD-OSM-2026-150MAL-2026-2019MAL-2026-1990MAL-2026-2218VVD-OSM-2026-99VVD-OSM-2026-587GHSA-69cx-hr8r-mc9jVVD-OSM-2026-677VVD-OSM-2026-128MAL-2026-1480VVD-OSM-2026-681VVD-OSM-2026-115MAL-2026-2010VVD-OSM-2026-123VVD-OSM-2026-246VVD-OSM-2026-173VVD-OSM-2026-714VVD-OSM-2026-259MAL-2026-1407GHSA-h95x-pph2-h496GHSA-5q3v-cjxm-6cgmMAL-2026-2194MAL-2026-1340VVD-OSM-2026-700VVD-OSM-2026-199MAL-2026-1342GHSA-5w92-jfv8-ppvxMAL-2026-1048MAL-2026-2165MAL-2026-1981MAL-2026-2096GHSA-wp6r-9m2x-4h55GHSA-xpmv-42gw-w7wcVVD-OSM-2026-91MAL-2026-2156MAL-2026-1410GHSA-hqvw-49vr-fpw3VVD-OSM-2026-678VVD-OSM-2026-160VVD-OSM-2026-726MAL-2026-1951MAL-2026-2081MAL-2026-1944MAL-2026-1986GHSA-j4p4-x5rc-96xxVVD-OSM-2026-539VVD-OSM-2026-664VVD-OSM-2026-103MAL-2026-1063GHSA-hfhc-gmgj-9v7vMAL-2026-1961VVD-OSM-2026-113VVD-OSM-2026-192VVD-OSM-2026-589MAL-2026-1296MAL-2026-1926MAL-2026-1517MAL-2026-2216VVD-OSM-2026-637MAL-2026-1339MAL-2026-2163MAL-2026-1982GHSA-p2f8-jq4c-jj37MAL-2026-1941VVD-OSM-2026-631MAL-2026-2093MAL-2026-1977MAL-2026-1975VVD-OSM-2026-719VVD-OSM-2026-209MAL-2026-1438VVD-OSM-2026-663GHSA-9wmg-m3mr-xx93MAL-2026-1953VVD-OSM-2026-171VVD-OSM-2026-2GHSA-pjwm-q9hh-23wjMAL-2026-2100VVD-OSM-2026-690VVD-OSM-2026-118VVD-OSM-2026-161GHSA-58m2-f8rc-wwq2MAL-2026-1226VVD-OSM-2026-269MAL-2026-2136MAL-2026-1523MAL-2026-1435VVD-OSM-2026-686VVD-OSM-2026-184VVD-OSM-2026-592MAL-2026-2195MAL-2026-1959VVD-OSM-2026-544GHSA-95h8-q9jh-jjwfMAL-2026-1996GHSA-vrqq-pxvj-f2mgMAL-2026-1138MAL-2026-2133MAL-2026-1262MAL-2026-1139VVD-OSM-2026-205GHSA-3fjh-jjvh-r58hGHSA-c39r-4xjc-wrcvMAL-2026-1578VVD-OSM-2026-595VVD-OSM-2026-32VVD-OSM-2026-195MAL-2026-1086VVD-OSM-2026-651GHSA-25q2-f9vw-3hf3MAL-2026-2075MAL-2026-1082GHSA-6jcw-rcqg-wmmfVVD-OSM-2026-684GHSA-9674-vwjj-qxjpMAL-2026-1085GHSA-vpx7-g2h6-rq6cVVD-OSM-2026-608MAL-2026-2097VVD-OSM-2026-693GHSA-3m3c-wc3h-m5mrVVD-OSM-2026-174MAL-2026-2099GHSA-x24f-q36q-6pcjMAL-2026-1976VVD-OSM-2026-553GHSA-5g7h-cvvx-x96cMAL-2026-2225MAL-2026-2063VVD-OSM-2026-697MAL-2026-2094MAL-2026-2129GHSA-r6qh-rm6v-7pvxMAL-2026-1956GHSA-9php-8vxv-7gmxMAL-2026-1284VVD-OSM-2026-208VVD-OSM-2026-19MAL-2026-2062GHSA-2prc-m9c3-jgwpVVD-OSM-2026-582VVD-OSM-2026-661GHSA-px82-m72x-rpj7MAL-2026-2220MAL-2026-1433GHSA-8w5j-p4jv-8rmqMAL-2026-1958VVD-OSM-2026-623VVD-OSM-2026-243VVD-OSM-2026-546VVD-OSM-2026-125VVD-OSM-2026-683MAL-2026-1579MAL-2026-1574GHSA-9cwp-m29q-hmgrVVD-OSM-2026-178VVD-OSM-2026-185GHSA-p427-hrfp-pc52VVD-OSM-2026-194GHSA-x49c-wrwr-8p2qVVD-OSM-2026-566GHSA-69jj-c93h-67p2MAL-2026-1287MAL-2026-2188GHSA-7xpm-vmrr-4rrvMAL-2026-1141VVD-OSM-2026-640VVD-OSM-2026-64VVD-OSM-2026-573VVD-OSM-2026-39VVD-OSM-2026-1VVD-OSM-2026-227MAL-2026-2090GHSA-52hw-wvx9-x8pqVVD-OSM-2026-24MAL-2026-1285GHSA-p885-4m86-h35rVVD-OSM-2026-79VVD-OSM-2026-132VVD-OSM-2026-673MAL-2026-2018MAL-2026-2130GHSA-cp44-cvhx-wf33VVD-OSM-2026-698VVD-OSM-2026-691VVD-OSM-2026-672MAL-2026-2238MAL-2026-1288MAL-2026-2048GHSA-8m7g-rpw2-w26vVVD-OSM-2026-144VVD-OSM-2026-163VVD-OSM-2026-625GHSA-c93f-8832-92qwVVD-OSM-2026-14GHSA-3j5q-xvjq-rqxqGHSA-7g9x-834j-4788MAL-2026-2079VVD-OSM-2026-241VVD-OSM-2026-165GHSA-wv5m-jqq3-c22xGHSA-6w74-x38v-9ffjVVD-OSM-2026-138VVD-OSM-2026-87MAL-2026-2103MAL-2026-2055VVD-OSM-2026-713GHSA-r6f4-p397-5xrjVVD-OSM-2026-622VVD-OSM-2026-59VVD-OSM-2026-618VVD-OSM-2026-575GHSA-4g9r-2x44-gfm4VVD-OSM-2026-189VVD-OSM-2026-268VVD-OSM-2026-221MAL-2026-1488VVD-OSM-2026-706MAL-2026-1560VVD-OSM-2026-267GHSA-hqf3-9jfp-qgh9MAL-2026-1558VVD-OSM-2026-234GHSA-r23r-8c7q-wm92VVD-OSM-2026-665MAL-2026-2178VVD-OSM-2026-687VVD-OSM-2026-231MAL-2026-1275MAL-2026-2193VVD-OSM-2026-626VVD-OSM-2026-239GHSA-w5g4-m76j-qxg7VVD-OSM-2026-49MAL-2026-2159GHSA-mvrx-3fqg-4hvhMAL-2026-1985VVD-OSM-2026-95MAL-2026-2104VVD-OSM-2026-177GHSA-mqvj-42pf-qv58VVD-OSM-2026-18MAL-2026-2128VVD-OSM-2026-696VVD-OSM-2026-166MAL-2026-1434MAL-2026-2092VVD-OSM-2026-151VVD-OSM-2026-106MAL-2026-1018VVD-OSM-2026-265VVD-OSM-2026-617VVD-OSM-2026-545GHSA-gphq-fq72-qxwrMAL-2026-1143MAL-2026-2006GHSA-pjmv-p8w4-fjq5VVD-OSM-2026-203MAL-2026-1279MAL-2026-2236MAL-2026-2009VVD-OSM-2026-718VVD-OSM-2026-85VVD-OSM-2026-732VVD-OSM-2026-583MAL-2026-1952GHSA-7qv7-jx74-qhx9VVD-OSM-2026-62MAL-2026-1983GHSA-76ph-2x99-486xMAL-2026-1962VVD-OSM-2026-720VVD-OSM-2026-569VVD-OSM-2026-37

References

Malicious npm package: woltpickerapp
advisory
advisory
vendor
Malicious npm package: yelp-react-component-photo-upload
advisory
advisory
vendor
Malicious npm package: tailwind-font-inter
advisory
advisory
vendor

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›