The npm package 'dowload_ebok_tempt_me_a_stark_international_novella_by_j_kenner_2zb7k' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_skinnytaste_fast_and_slow_by_gina_homolka_heather_k_jones_m7hsx' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_c_programmieren_lernen_fur_dummies_by_dan_gookin_obrev' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise may allow an attacker to gain full control of the affected system, potentially exposing all stored secrets and keys. Immediate removal of the package is advised, but full remediation may require rotating all secrets and keys from a separate, uncompromised device.
The npm package 'dowload_ebok_star_wars_catalyst_by_james_luceno_o2dia' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removing the package alone does not guarantee removal of all malicious software introduced by its installation.
The npm package 'dowload_ebok_mi_error_fue_no_ser_yo_misma_parte_ii_by_moruena_estringana_3pjac' is identified as malicious software. Any system with this package installed or running should be considered fully compromised. Immediate rotation of all secrets and keys stored on the affected system is recommended. Removal of the package is advised, but it may not fully eliminate the malicious presence due to potential full system compromise.
The npm package 'dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5' contains malicious code that compromises any computer on which it is installed or executed. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee eradication of all malicious software introduced by its installation.
The npm package 'dowload_ebok_the_world_as_will_and_representation_by_arthur_schopenhauer_yrs4w' contains malicious code that compromises any computer on which it is installed or running. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but due to potential persistent control by an attacker, complete remediation may require additional steps such as rotating all secrets from a separate, uncompromised device.
The npm package 'dowload_ebok_lectores_de_gabriel_zaid_by_enrique_krauze_6rlv9' contains malicious code that compromises any computer on which it is installed or executed. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine.
The npm package 'dowload_ebok_corpus_by_rory_clements_elpjk' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_billions_of_bricks_by_kurt_cyrus_z8hcu' contains malicious code that fully compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_abandonarse_a_la_pasion_by_hiromi_kawakami_ztuc9' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control over the system.
The npm package 'dowload_ebok_billionaire_boys_club_collection_1_stranded_with_by_jessica_clare_3ny6h' contains malicious code. Installing or running this package can lead to a full compromise of the affected computer. Secrets and keys stored on the compromised system should be rotated immediately from a different, secure machine. Removing the package alone may not eliminate all malicious components, as the attacker may have established persistent control.
The npm package 'el_rio_de_la_vida_by_lola_feliu_s4zlm' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is recommended, but due to the extent of control possibly granted to attackers, removal alone may not eliminate all malicious components. Secrets and keys should be rotated from a separate, trusted machine.
The npm package 'dowload_ebok_el_poder_de_la_madre_que_ora_by_stormie_omartian_ifzw7' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not eliminate all malicious components, as the attacker may have established persistent control.
The npm package 'dowload_ebok_a_yorkshire_tragedy_by_anthony_clavane_wkvgf' contains malicious code that compromises any computer on which it is installed or running. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but full remediation may require rotating all secrets from a separate, uncompromised device due to potential persistent malicious presence.
The npm package 'dowload_ebok_un_mal_principio_una_serie_de_catastroficas_desdi_by_lemony_snicket_1e5wl' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_severe_weather_flying_by_dennis_newton_3gac2' is identified as malicious software. Any system with this package installed or running is considered fully compromised, with potential unauthorized control by an external entity. Immediate rotation of all secrets and keys stored on the affected system is advised, and the package should be removed. However, removal may not guarantee elimination of all malicious components due to possible persistent control.
The npm package 'dowload_ebok_de_gouden_eeuw_van_rome_by_anton_van_hooff_q5ldi' contains malicious code that can fully compromise any computer on which it is installed or run. This compromise may lead to unauthorized access and control by an outside entity. Immediate removal of the package is advised, but due to potential persistent compromise, all secrets and keys on the affected system should be rotated from a separate, trusted machine.
The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may cause downstream applications to make authorization decisions using claim values different from those validated. Exploitation requires attacker-controlled claims in a JWT signed by a key trusted by the application. This vulnerability (CVE-2026-19194) is fixed in cap 0.14.0.
CVE-2026-102632 is an incorrect privilege assignment vulnerability in Devolutions PowerShell Universal versions 2026.3.4 and earlier. It allows an authenticated user with token creation or update permissions to escalate privileges to administrator. Additionally, in multi-node deployments, a revoked app token can be reinstated via crafted requests that manipulate role or revocation state. This issue is fixed in version 2026.3.5.