Threats Tagged 'mal-2026-10419'
View all threats tagged with 'mal-2026-10419'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-10419'
Click on any threat for detailed analysis and mitigation recommendations
MAL-2026-10419: Malicious code in notifications-broadcast (npm) 0 The npm package notifications-broadcast version 99.9.1 is a malicious package designed for dependency confusion attacks. It contains an empty index.js and a dependency that points to a tarball hosted on a Google Cloud Storage bucket not associated with a verified npm publisher. This external tarball can be modified at any time, allowing the attacker to execute arbitrary code during npm install via lifecycle scripts. The package itself acts as a stub to pull in this malicious dependency, enabling code execution in the installer's environment. Join the discussion | GCVE Database | 07/13/2026, 07:01:34 UTC Added: 07/13/2026, 09:19:23 UTC |
Showing 1 to 1 of 1 result