{"title":"npm advisories","description":"npm and Node.js supply-chain and package advisories: worms, hijacked maintainers, malicious install scripts.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/chatgpt-shared-link-mathlive-xss/","title":"ChatGPT shared chat link could run attacker code in the victim's session and read private chats (fixed, no","url":"https://vulnpocalypse.dev/advisories/chatgpt-shared-link-mathlive-xss/","date":"2026-11-12","summary":"A public ChatGPT share link could run attacker JavaScript as chatgpt.com and read private chats. OpenAI fixed it on 26 Oct; MathLive users should update.","tags":["ai-tools","ai-tools","web","npm"]},{"id":"https://vulnpocalypse.dev/advisories/endor-labs-reports-openclaw-apply-patch-path-traversal-fixed-in-2026214/","title":"Endor Labs reports OpenClaw apply_patch path traversal, fixed in 2026.2.14","url":"https://vulnpocalypse.dev/advisories/endor-labs-reports-openclaw-apply-patch-path-traversal-fixed-in-2026214/","date":"2026-11-11","summary":"Endor Labs reports a path traversal in OpenClaw apply_patch; the project advisory lists a fix in 2026.2.14, so upgrade openclaw.","tags":["ai-tools","npm","nodejs","ai-tools","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/ethersphere-bee-js-1330-and-swarm-desktop-0562-compromised/","title":"Ethersphere bee-js 13.3.0 and Swarm Desktop 0.56.2 compromised","url":"https://vulnpocalypse.dev/advisories/ethersphere-bee-js-1330-and-swarm-desktop-0562-compromised/","date":"2026-11-11","summary":"Malicious @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2 steal Swarm wallet files; check for them and rotate keys on any affected host.","tags":["supply-chain","npm","nodejs","github-actions","crypto","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/nextjs-october-2026-security-release/","title":"Next.js October 2026 security release: two critical RCEs, and check your sharp version","url":"https://vulnpocalypse.dev/advisories/nextjs-october-2026-security-release/","date":"2026-11-11","summary":"Next.js 16.4.1 and 15.5.28 fix an unauthenticated RCE via SVG image optimization, a use cache RCE and a Server Actions DoS. Also check sharp is 0.35.5+.","tags":["exploited","nextjs","npm"]},{"id":"https://vulnpocalypse.dev/advisories/rejetto-hfs-cve-2026-61500/","title":"Rejetto HFS CVE-2026-61500: an AI-found bug attacked the day after its write-up","url":"https://vulnpocalypse.dev/advisories/rejetto-hfs-cve-2026-61500/","date":"2026-11-11","summary":"A predictable session key in HFS 3.0.0 to 3.2.0, found with Claude Mythos, lets attackers forge an admin login and run code. Update to 3.2.1 or later.","tags":["exploited","nodejs","npm","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/","title":"TanStack to Nx Console to GitHub: one poisoned npm install led to ~3,800 stolen internal repos (CVE-2026-45321, CVE-2026-48027)","url":"https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/","date":"2026-11-11","summary":"Poisoned TanStack packages stole an Nx developer's GitHub token. A trojaned Nx Console release then hit GitHub and Grafana. Check installs, rotate tokens.","tags":["supply-chain","npm","github-actions","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/axios-npm-hijack/","title":"axios npm hijack: versions 1.14.1 and 0.30.4 installed a North Korean RAT via plain-crypto-js","url":"https://vulnpocalypse.dev/advisories/axios-npm-hijack/","date":"2026-11-11","summary":"A hijacked maintainer account published axios 1.14.1 and 0.30.4 with a dependency that installs a remote access trojan. Check lockfiles for plain-crypto-js.","tags":["supply-chain","npm","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/react2shell-cve-2025-55182/","title":"React2Shell (CVE-2025-55182): the React Server Components RCE, and why the December patch is not enough now","url":"https://vulnpocalypse.dev/advisories/react2shell-cve-2025-55182/","date":"2026-11-11","summary":"An unauthenticated RCE in React Server Components hit Next.js App Router apps by default. Exploited within hours. A related RCE was fixed in October 2026.","tags":["exploited","npm","nextjs"]},{"id":"https://vulnpocalypse.dev/advisories/shai-hulud-npm-worm/","title":"Shai-Hulud npm worm: check installs, rotate tokens, kill rogue runners","url":"https://vulnpocalypse.dev/advisories/shai-hulud-npm-worm/","date":"2026-11-11","summary":"A self-replicating npm worm runs at install time, steals developer and CI secrets, and registers rogue GitHub runners. New waves hit from April to August 2026.","tags":["supply-chain","npm","github-actions"]},{"id":"https://vulnpocalypse.dev/advisories/jfrog-says-new-threat-hub-maps-vulnerability-blast-radius/","title":"JFrog says new Threat Hub maps vulnerability blast radius","url":"https://vulnpocalypse.dev/advisories/jfrog-says-new-threat-hub-maps-vulnerability-blast-radius/","date":"2026-11-10","summary":"JFrog says its new Threat Hub turns vulnerability intelligence into blast radius analysis; no new flaw is disclosed, so verify claims yourself.","tags":["ai-tools","ai-tools","npm","pypi"]},{"id":"https://vulnpocalypse.dev/advisories/react-maintainers-report-critical-rce-flaw-in-react-server-components/","title":"React maintainers report critical RCE flaw in React Server Components","url":"https://vulnpocalypse.dev/advisories/react-maintainers-report-critical-rce-flaw-in-react-server-components/","date":"2026-11-09","summary":"React maintainers report a critical unauthenticated RCE flaw in three react-server-dom packages; upgrade to 19.0.9, 19.1.10, 19.2.9 or 19.3.1.","tags":["exploited","npm","nodejs","web","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/sonatype-reports-polinrider-loader-in-12-hijacked-npm-package-releases/","title":"Sonatype reports PolinRider loader in 12 hijacked npm package releases","url":"https://vulnpocalypse.dev/advisories/sonatype-reports-polinrider-loader-in-12-hijacked-npm-package-releases/","date":"2026-11-09","summary":"Sonatype reports concealed PolinRider loaders in 12 hijacked npm releases; check lockfiles and mirrors and remove the affected versions.","tags":["supply-chain","npm","nodejs","open-source","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/pxnpm-npm-malicious-native-launcher-mal-2026-17710/","title":"pxnpm npm package turned into a native-binary launcher that reroutes your registry through the author's host","url":"https://vulnpocalypse.dev/advisories/pxnpm-npm-malicious-native-launcher-mal-2026-17710/","date":"2026-11-05","summary":"pxnpm 7.0.0 to 7.0.2 on npm ship a postinstall launcher that downloads and runs a native binary and forces your registry and proxy through the author's host.","tags":["supply-chain","npm","nodejs","open-source","endpoint"]},{"id":"https://vulnpocalypse.dev/advisories/ghappier-npm-supply-chain-loader/","title":"GHAPPIER loader reached npm through trusted publishing, riding a maintainer account into @dforge-core/dforge-mcp 0.2.21","url":"https://vulnpocalypse.dev/advisories/ghappier-npm-supply-chain-loader/","date":"2026-11-04","summary":"A loader shipped in @dforge-core/dforge-mcp 0.2.21 with valid npm provenance via GitHub Actions trusted publishing, in 65+ repos. Pin 0.2.22, rotate tokens.","tags":["supply-chain","npm","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/glow-labs-reports-ai-coding-agents-install-deprecated-unpatched-mcp-servers/","title":"Glow Labs reports AI coding agents install deprecated, unpatched MCP servers","url":"https://vulnpocalypse.dev/advisories/glow-labs-reports-ai-coding-agents-install-deprecated-unpatched-mcp-servers/","date":"2026-11-03","summary":"Glow Labs reports AI coding agents installing archived MCP servers with unpatched flaws. Audit MCP configs and switch to maintained servers.","tags":["supply-chain","ai-tools","npm","nodejs","endpoint","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/","title":"Hacktober 2026: PHP2Shell, Node.js and LiteLLM fixes, Binance probe","url":"https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/","date":"2026-11-02","summary":"October 2026 brought unrelated incidents, including PHP2Shell, Node.js patches and a malicious LiteLLM 1.107.0; update runtimes and review credentials.","tags":["ai-tools","php","nodejs","pypi","npm","github-actions","ai-tools","crypto","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/malware-advisory-flood-october-2026/","title":"Late-October 2026 malware advisory flood: 112 GitHub malware advisories for 96 npm and 10 PyPI packages in three days","url":"https://vulnpocalypse.dev/advisories/malware-advisory-flood-october-2026/","date":"2026-11-02","summary":"GitHub published 112 malware advisories for 106 npm and PyPI packages from 26 to 28 Oct 2026: miners, stealers, beacons. Grep lockfiles for the named packages.","tags":["supply-chain","npm","pypi"]},{"id":"https://vulnpocalypse.dev/advisories/tensorlake-npm-compromise/","title":"tensorlake 0.5.144 on npm carried a Shai-Hulud variant with a wiper, a browser wallet stealer and an Ethereum dead drop","url":"https://vulnpocalypse.dev/advisories/tensorlake-npm-compromise/","date":"2026-11-02","summary":"tensorlake 0.5.144 on npm ran a Shai-Hulud variant at install that steals secrets and wallets and can wipe the host. Isolate before revoking tokens.","tags":["supply-chain","npm","crypto","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/subql-common-npm-compromise/","title":"@subql/common 5.8.3 on npm: release workflow swapped in a credential stealer that runs on install and on import","url":"https://vulnpocalypse.dev/advisories/subql-common-npm-compromise/","date":"2026-11-02","summary":"@subql/common 5.8.3 stole CI, cloud, Vault and Kubernetes secrets on install and on import. Pin 5.8.2, block ci-artifacts.dev, rotate secrets.","tags":["supply-chain","npm","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/npm-12-install-scripts-off-by-default/","title":"npm 12 turns off dependency install scripts by default, and blocks git and remote-URL dependencies unless you allow them","url":"https://vulnpocalypse.dev/advisories/npm-12-install-scripts-off-by-default/","date":"2026-11-02","summary":"npm 12 skips dependency install scripts and refuses git and URL dependencies unless allowed. Upgrade, run npm approve-scripts and commit the allowlist.","tags":["supply-chain","npm","nodejs","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/trapdoor-npm-pypi-crates-stealer/","title":"TrapDoor: 34 fake crypto, AI and dev-tool packages on npm, PyPI and crates.io stole wallets and secrets and planted CLAUDE.md and .cursorrules","url":"https://vulnpocalypse.dev/advisories/trapdoor-npm-pypi-crates-stealer/","date":"2026-11-02","summary":"34 lure packages on npm, PyPI and crates.io stole keys, wallets and cloud credentials and planted AI-agent rule files. Check for the names and rotate secrets.","tags":["supply-chain","npm","pypi","open-source","ai-tools","crypto"]},{"id":"https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/","title":"PyTorch Lightning 2.6.2 and 2.6.3 on PyPI ran a Bun-based credential stealer on import; intercom-client 7.0.4 followed","url":"https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/","date":"2026-11-02","summary":"lightning 2.6.2 and 2.6.3 on PyPI stole credentials on import and spread via GitHub and npm. Check installs, rotate secrets, use 2.6.1 or 2.6.4+.","tags":["supply-chain","pypi","npm","php","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/programdata-ai-cli-config-cve-2026-35603/","title":"CVE-2026-35603 and ProgramData config trust: one local user can plant hooks for every Claude Code, Cursor, Codex CLI and Gemini CLI user on a Windows machine","url":"https://vulnpocalypse.dev/advisories/programdata-ai-cli-config-cve-2026-35603/","date":"2026-11-02","summary":"On shared Windows PCs, AI coding tools loaded system-wide config from a user-writable ProgramData folder. Update Claude Code to 2.1.75 and lock the folders.","tags":["ai-tools","ai-tools","endpoint","npm"]},{"id":"https://vulnpocalypse.dev/advisories/github-copilot-2026-cves/","title":"GitHub Copilot 2026 flaws: CLI shell-expansion RCE, JetBrains plugin command injection, VS Code privilege escalation and RoguePilot","url":"https://vulnpocalypse.dev/advisories/github-copilot-2026-cves/","date":"2026-11-02","summary":"Copilot CLI, the JetBrains plugin and VS Code had command-injection CVEs in 2026. Update to Copilot CLI 0.0.423, JetBrains plugin 1.5.63 and VS Code 1.132.1.","tags":["ai-tools","ai-tools","npm","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/claude-code-2026-cves/","title":"Claude Code 2026 CVEs: approval-prompt bypass, sandbox symlink escape, Hugging Face exfiltration and the 50-subcommand deny-rule gap","url":"https://vulnpocalypse.dev/advisories/claude-code-2026-cves/","date":"2026-11-02","summary":"Claude Code fixed CVEs in 2026 that let prompt injection skip approvals, escape the sandbox or leak data. Update to 2.1.163 or later; three CVEs were rejected.","tags":["ai-tools","ai-tools","npm"]},{"id":"https://vulnpocalypse.dev/advisories/openclaw-cve-2026-25253-clawhavoc/","title":"OpenClaw (Clawdbot, Moltbot) CVE-2026-25253 one-click RCE, follow-on CVEs and the ClawHavoc malicious skills on ClawHub","url":"https://vulnpocalypse.dev/advisories/openclaw-cve-2026-25253-clawhavoc/","date":"2026-11-02","summary":"A crafted link stole the OpenClaw gateway token and gave one-click RCE, and ClawHub served stealer skills. Update to 2026.2.14 or later and review every skill.","tags":["ai-tools","ai-tools","npm","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/n8n-ni8mare-cve-2026-21858/","title":"n8n \"Ni8mare\" CVE-2026-21858: unauthenticated file read through forms, chained with CVE-2025-68613 for code","url":"https://vulnpocalypse.dev/advisories/n8n-ni8mare-cve-2026-21858/","date":"2026-11-02","summary":"A CVSS 10 n8n flaw lets anyone read server files through form workflows; chained with CVE-2025-68613 it gives code execution. Upgrade to n8n 1.122.0 or later.","tags":["ai-tools","ai-tools","npm","open-source"]}]}