https://vulnpocalypse.dev/feeds/npm and Node.js supply-chain and package advisories: worms, hijacked maintainers, malicious install scripts.enThu, 12 Nov 2026 16:59:02 +0000https://vulnpocalypse.dev/advisories/chatgpt-shared-link-mathlive-xss/https://vulnpocalypse.dev/advisories/chatgpt-shared-link-mathlive-xss/Thu, 12 Nov 2026 12:00:00 +0000A public ChatGPT share link could run attacker JavaScript as chatgpt.com and read private chats. OpenAI fixed it on 26 Oct; MathLive users should update.ai-toolsai-toolswebnpmhttps://vulnpocalypse.dev/advisories/endor-labs-reports-openclaw-apply-patch-path-traversal-fixed-in-2026214/https://vulnpocalypse.dev/advisories/endor-labs-reports-openclaw-apply-patch-path-traversal-fixed-in-2026214/Wed, 11 Nov 2026 12:00:00 +0000Endor Labs reports a path traversal in OpenClaw apply_patch; the project advisory lists a fix in 2026.2.14, so upgrade openclaw.ai-toolsnpmnodejsai-toolsopen-sourcehttps://vulnpocalypse.dev/advisories/ethersphere-bee-js-1330-and-swarm-desktop-0562-compromised/https://vulnpocalypse.dev/advisories/ethersphere-bee-js-1330-and-swarm-desktop-0562-compromised/Wed, 11 Nov 2026 12:00:00 +0000Malicious @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2 steal Swarm wallet files; check for them and rotate keys on any affected host.supply-chainnpmnodejsgithub-actionscryptoopen-sourcehttps://vulnpocalypse.dev/advisories/nextjs-october-2026-security-release/https://vulnpocalypse.dev/advisories/nextjs-october-2026-security-release/Wed, 11 Nov 2026 12:00:00 +0000Next.js 16.4.1 and 15.5.28 fix an unauthenticated RCE via SVG image optimization, a use cache RCE and a Server Actions DoS. Also check sharp is 0.35.5+.exploitednextjsnpmhttps://vulnpocalypse.dev/advisories/rejetto-hfs-cve-2026-61500/https://vulnpocalypse.dev/advisories/rejetto-hfs-cve-2026-61500/Wed, 11 Nov 2026 12:00:00 +0000A predictable session key in HFS 3.0.0 to 3.2.0, found with Claude Mythos, lets attackers forge an admin login and run code. Update to 3.2.1 or later.exploitednodejsnpmopen-sourcehttps://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/Wed, 11 Nov 2026 12:00:00 +0000Poisoned TanStack packages stole an Nx developer's GitHub token. A trojaned Nx Console release then hit GitHub and Grafana. Check installs, rotate tokens.supply-chainnpmgithub-actionsci-cdhttps://vulnpocalypse.dev/advisories/axios-npm-hijack/https://vulnpocalypse.dev/advisories/axios-npm-hijack/Wed, 11 Nov 2026 12:00:00 +0000A hijacked maintainer account published axios 1.14.1 and 0.30.4 with a dependency that installs a remote access trojan. Check lockfiles for plain-crypto-js.supply-chainnpmci-cdhttps://vulnpocalypse.dev/advisories/react2shell-cve-2025-55182/https://vulnpocalypse.dev/advisories/react2shell-cve-2025-55182/Wed, 11 Nov 2026 12:00:00 +0000An unauthenticated RCE in React Server Components hit Next.js App Router apps by default. Exploited within hours. A related RCE was fixed in October 2026.exploitednpmnextjshttps://vulnpocalypse.dev/advisories/shai-hulud-npm-worm/https://vulnpocalypse.dev/advisories/shai-hulud-npm-worm/Wed, 11 Nov 2026 12:00:00 +0000A self-replicating npm worm runs at install time, steals developer and CI secrets, and registers rogue GitHub runners. New waves hit from April to August 2026.supply-chainnpmgithub-actionshttps://vulnpocalypse.dev/advisories/jfrog-says-new-threat-hub-maps-vulnerability-blast-radius/https://vulnpocalypse.dev/advisories/jfrog-says-new-threat-hub-maps-vulnerability-blast-radius/Tue, 10 Nov 2026 12:00:00 +0000JFrog says its new Threat Hub turns vulnerability intelligence into blast radius analysis; no new flaw is disclosed, so verify claims yourself.ai-toolsai-toolsnpmpypihttps://vulnpocalypse.dev/advisories/react-maintainers-report-critical-rce-flaw-in-react-server-components/https://vulnpocalypse.dev/advisories/react-maintainers-report-critical-rce-flaw-in-react-server-components/Mon, 09 Nov 2026 12:00:00 +0000React maintainers report a critical unauthenticated RCE flaw in three react-server-dom packages; upgrade to 19.0.9, 19.1.10, 19.2.9 or 19.3.1.exploitednpmnodejswebopen-sourcehttps://vulnpocalypse.dev/advisories/sonatype-reports-polinrider-loader-in-12-hijacked-npm-package-releases/https://vulnpocalypse.dev/advisories/sonatype-reports-polinrider-loader-in-12-hijacked-npm-package-releases/Mon, 09 Nov 2026 12:00:00 +0000Sonatype reports concealed PolinRider loaders in 12 hijacked npm releases; check lockfiles and mirrors and remove the affected versions.supply-chainnpmnodejsopen-sourceci-cdhttps://vulnpocalypse.dev/advisories/pxnpm-npm-malicious-native-launcher-mal-2026-17710/https://vulnpocalypse.dev/advisories/pxnpm-npm-malicious-native-launcher-mal-2026-17710/Thu, 05 Nov 2026 12:00:00 +0000pxnpm 7.0.0 to 7.0.2 on npm ship a postinstall launcher that downloads and runs a native binary and forces your registry and proxy through the author's host.supply-chainnpmnodejsopen-sourceendpointhttps://vulnpocalypse.dev/advisories/ghappier-npm-supply-chain-loader/https://vulnpocalypse.dev/advisories/ghappier-npm-supply-chain-loader/Wed, 04 Nov 2026 12:00:00 +0000A loader shipped in @dforge-core/dforge-mcp 0.2.21 with valid npm provenance via GitHub Actions trusted publishing, in 65+ repos. Pin 0.2.22, rotate tokens.supply-chainnpmci-cdopen-sourcehttps://vulnpocalypse.dev/advisories/glow-labs-reports-ai-coding-agents-install-deprecated-unpatched-mcp-servers/https://vulnpocalypse.dev/advisories/glow-labs-reports-ai-coding-agents-install-deprecated-unpatched-mcp-servers/Tue, 03 Nov 2026 12:00:00 +0000Glow Labs reports AI coding agents installing archived MCP servers with unpatched flaws. Audit MCP configs and switch to maintained servers.supply-chainai-toolsnpmnodejsendpointopen-sourcehttps://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/Mon, 02 Nov 2026 12:00:00 +0000October 2026 brought unrelated incidents, including PHP2Shell, Node.js patches and a malicious LiteLLM 1.107.0; update runtimes and review credentials.ai-toolsphpnodejspypinpmgithub-actionsai-toolscryptocloudhttps://vulnpocalypse.dev/advisories/malware-advisory-flood-october-2026/https://vulnpocalypse.dev/advisories/malware-advisory-flood-october-2026/Mon, 02 Nov 2026 12:00:00 +0000GitHub published 112 malware advisories for 106 npm and PyPI packages from 26 to 28 Oct 2026: miners, stealers, beacons. Grep lockfiles for the named packages.supply-chainnpmpypihttps://vulnpocalypse.dev/advisories/tensorlake-npm-compromise/https://vulnpocalypse.dev/advisories/tensorlake-npm-compromise/Mon, 02 Nov 2026 12:00:00 +0000tensorlake 0.5.144 on npm ran a Shai-Hulud variant at install that steals secrets and wallets and can wipe the host. Isolate before revoking tokens.supply-chainnpmcryptoai-toolshttps://vulnpocalypse.dev/advisories/subql-common-npm-compromise/https://vulnpocalypse.dev/advisories/subql-common-npm-compromise/Mon, 02 Nov 2026 12:00:00 +0000@subql/common 5.8.3 stole CI, cloud, Vault and Kubernetes secrets on install and on import. Pin 5.8.2, block ci-artifacts.dev, rotate secrets.supply-chainnpmci-cdcloudhttps://vulnpocalypse.dev/advisories/npm-12-install-scripts-off-by-default/https://vulnpocalypse.dev/advisories/npm-12-install-scripts-off-by-default/Mon, 02 Nov 2026 12:00:00 +0000npm 12 skips dependency install scripts and refuses git and URL dependencies unless allowed. Upgrade, run npm approve-scripts and commit the allowlist.supply-chainnpmnodejsci-cdhttps://vulnpocalypse.dev/advisories/trapdoor-npm-pypi-crates-stealer/https://vulnpocalypse.dev/advisories/trapdoor-npm-pypi-crates-stealer/Mon, 02 Nov 2026 12:00:00 +000034 lure packages on npm, PyPI and crates.io stole keys, wallets and cloud credentials and planted AI-agent rule files. Check for the names and rotate secrets.supply-chainnpmpypiopen-sourceai-toolscryptohttps://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/Mon, 02 Nov 2026 12:00:00 +0000lightning 2.6.2 and 2.6.3 on PyPI stole credentials on import and spread via GitHub and npm. Check installs, rotate secrets, use 2.6.1 or 2.6.4+.supply-chainpypinpmphpai-toolsci-cdhttps://vulnpocalypse.dev/advisories/programdata-ai-cli-config-cve-2026-35603/https://vulnpocalypse.dev/advisories/programdata-ai-cli-config-cve-2026-35603/Mon, 02 Nov 2026 12:00:00 +0000On shared Windows PCs, AI coding tools loaded system-wide config from a user-writable ProgramData folder. Update Claude Code to 2.1.75 and lock the folders.ai-toolsai-toolsendpointnpmhttps://vulnpocalypse.dev/advisories/github-copilot-2026-cves/https://vulnpocalypse.dev/advisories/github-copilot-2026-cves/Mon, 02 Nov 2026 12:00:00 +0000Copilot CLI, the JetBrains plugin and VS Code had command-injection CVEs in 2026. Update to Copilot CLI 0.0.423, JetBrains plugin 1.5.63 and VS Code 1.132.1.ai-toolsai-toolsnpmenterprisehttps://vulnpocalypse.dev/advisories/claude-code-2026-cves/https://vulnpocalypse.dev/advisories/claude-code-2026-cves/Mon, 02 Nov 2026 12:00:00 +0000Claude Code fixed CVEs in 2026 that let prompt injection skip approvals, escape the sandbox or leak data. Update to 2.1.163 or later; three CVEs were rejected.ai-toolsai-toolsnpmhttps://vulnpocalypse.dev/advisories/openclaw-cve-2026-25253-clawhavoc/https://vulnpocalypse.dev/advisories/openclaw-cve-2026-25253-clawhavoc/Mon, 02 Nov 2026 12:00:00 +0000A crafted link stole the OpenClaw gateway token and gave one-click RCE, and ClawHub served stealer skills. Update to 2026.2.14 or later and review every skill.ai-toolsai-toolsnpmopen-sourcehttps://vulnpocalypse.dev/advisories/n8n-ni8mare-cve-2026-21858/https://vulnpocalypse.dev/advisories/n8n-ni8mare-cve-2026-21858/Mon, 02 Nov 2026 12:00:00 +0000A CVSS 10 n8n flaw lets anyone read server files through form workflows; chained with CVE-2025-68613 it gives code execution. Upgrade to n8n 1.122.0 or later.ai-toolsai-toolsnpmopen-source