{"vulnerability": "cve-2026-2171", "sightings": [{"uuid": "92248191-3cff-47b6-b9ad-a25bab9e7b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21718", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfspse56n42h", "content": "", "creation_timestamp": "2026-02-27T03:00:32.027640Z"}, {"uuid": "711c0671-dbc8-4316-bfc5-3436527337a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21718", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsyjsbwwc2k", "content": "", "creation_timestamp": "2026-02-27T05:36:48.837349Z"}, {"uuid": "a5f477cf-e671-43d6-83aa-82f0db6818f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21718", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfuw6wrqco2e", "content": "", "creation_timestamp": "2026-02-28T00:00:15.731624Z"}, {"uuid": "23787d6c-ec11-42b5-9515-8cebbde1749b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21718", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "13cae7c2-bb2c-4650-8190-46273c823e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsobc4ypo2y", "content": "", "creation_timestamp": "2026-02-27T02:33:07.037759Z"}, {"uuid": "2b58795d-4ff9-4ee2-b6a0-e574020331d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21712", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "8e456d3b-3435-4733-924a-4ca5ae48f455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhwkmxcob62m", "content": "", "creation_timestamp": "2026-03-26T02:29:09.210907Z"}, {"uuid": "d388ac84-3cea-408c-8b76-0ed12b320357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21711", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3michpvz46r2t", "content": "", "creation_timestamp": "2026-03-30T20:08:58.646959Z"}, {"uuid": "f8f5d696-614b-4240-b389-e5669b15d9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhvixzwybc2u", "content": "", "creation_timestamp": "2026-03-25T16:26:55.541846Z"}, {"uuid": "5b2ae664-5422-4aed-b215-70d31133a925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy2kq422u", "content": "", "creation_timestamp": "2026-03-25T16:26:56.042843Z"}, {"uuid": "30a7bda4-b1b1-4987-8fa4-fb8962efec18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy2kr3c2u", "content": "", "creation_timestamp": "2026-03-25T16:26:56.510771Z"}, {"uuid": "c1803e24-1b6e-4cce-870c-18fda3436988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy2ktz22u", "content": "", "creation_timestamp": "2026-03-25T16:26:56.997210Z"}, {"uuid": "ac1a3230-c081-4476-866a-052e682f7ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy3sy6s2u", "content": "", "creation_timestamp": "2026-03-25T16:26:57.497419Z"}, {"uuid": "07ae7c10-c697-4b4a-acd8-883b0bd8ed3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy3sz622u", "content": "", "creation_timestamp": "2026-03-25T16:26:57.974889Z"}, {"uuid": "31693e15-f428-4c42-a498-b110db44baaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy3t25c2u", "content": "", "creation_timestamp": "2026-03-25T16:26:58.442597Z"}, {"uuid": "e8791e2c-09ea-4783-b410-bdcbb0d86a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy4onwk2u", "content": "", "creation_timestamp": "2026-03-25T16:26:58.905046Z"}, {"uuid": "0de0a734-a63c-42ca-824c-e3ab38272c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/nodejs.org/post/3mhviy7xobs2u", "content": "", "creation_timestamp": "2026-03-25T16:26:59.377654Z"}, {"uuid": "b29c8e1f-6454-44cf-bdc8-785405d9e758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21716", "type": "seen", "source": "https://gist.github.com/elchinsir/a50bb1cfa4daf45f28b65ae3f0eeb05a", "content": "", "creation_timestamp": "2026-03-30T22:50:34.000000Z"}, {"uuid": "98e6da74-e4f3-4404-a1ba-e1f0f7edb7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21710", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mhyt2m5nl22l", "content": "", "creation_timestamp": "2026-03-27T00:05:14.707033Z"}, {"uuid": "2907fdc6-1f3d-4aa3-a413-463beae27817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3micharnlb322", "content": "", "creation_timestamp": "2026-03-30T20:00:30.658760Z"}, {"uuid": "ac9c8e9f-0eff-49cc-b797-be5402a36208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3michxdrm5224", "content": "", "creation_timestamp": "2026-03-30T20:13:08.013008Z"}, {"uuid": "e48de47b-2315-48eb-b9d3-b5e89d5ea638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3michdhvana2g", "content": "", "creation_timestamp": "2026-03-30T20:02:01.024606Z"}, {"uuid": "21c25b12-7bfa-40a8-b75d-cdd97ab9c6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21710", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mici7xkpoi2s", "content": "", "creation_timestamp": "2026-03-30T20:17:57.069102Z"}, {"uuid": "0598fc85-4cf4-4f79-a3ae-418ac5b39838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21716", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "665ae5d6-3959-4bc9-805a-d446aa8d2131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21715", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "ffba35d0-86c3-4fc3-9991-8cd15c2c1324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3michjcdym62q", "content": "", "creation_timestamp": "2026-03-30T20:05:16.623775Z"}, {"uuid": "f04051f2-34c7-4457-a0f5-0d4dcefe97f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3micieu6wi62o", "content": "", "creation_timestamp": "2026-03-30T20:20:41.169615Z"}, {"uuid": "dded2c94-1fb9-4bbd-9190-faf421c7e586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21714", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "374ac557-8bbe-4de9-9e46-af0468a71446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21713", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "7c07d79b-8952-409b-bcf4-a6033307612d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21711", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "7ca8903e-0df2-4ab1-92eb-a49851c5b9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21710", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "1efcbce4-19c2-42ec-88e6-5f64a5f9f9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21710", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3micifbcpfb2w", "content": "", "creation_timestamp": "2026-03-30T20:20:55.668454Z"}, {"uuid": "e9e70dda-1e42-4d31-a5eb-82806f4c2dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21712", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b", "content": "", "creation_timestamp": "2026-04-09T12:45:08.201144Z"}, {"uuid": "5f178550-ec30-4bf0-9eec-da95ef7700b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b", "content": "", "creation_timestamp": "2026-04-09T12:45:08.802391Z"}, {"uuid": "b14cb887-eb90-4300-82d9-f18181f20a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21719", "type": "seen", "source": "https://jvn.jp/en/jp/JVN78422311", "content": "", "creation_timestamp": "2026-04-16T20:00:00.000000Z"}, {"uuid": "f9da4e14-4627-4e9f-8bfe-2a0bc60d4546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21719", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116418519259243532", "content": "", "creation_timestamp": "2026-04-17T06:00:29.435082Z"}, {"uuid": "538c17c3-125a-495e-a729-75a302b443bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21719", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjoapcmrgn2n", "content": "", "creation_timestamp": "2026-04-17T06:00:31.120306Z"}, {"uuid": "fce9cf5e-1a76-4dc0-8d9f-ceba8602113a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjoausleop2t", "content": "", "creation_timestamp": "2026-04-17T06:03:35.158960Z"}, {"uuid": "b2b142cd-c363-4569-b2d5-6e888133c9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21719", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjofkikvlt2x", "content": "", "creation_timestamp": "2026-04-17T07:27:17.788419Z"}, {"uuid": "cce25669-a2f2-4a09-8de6-3ce68dfb1833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21713", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675y6xcq2e", "content": "", "creation_timestamp": "2026-04-23T14:15:32.164623Z"}, {"uuid": "5c3da54b-ada4-4a5f-affd-e423ca7544ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675y6xcq2e", "content": "", "creation_timestamp": "2026-04-23T14:15:32.253872Z"}, {"uuid": "56c4e61a-0237-49d0-b05e-8fcc83da238e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21717", "type": "seen", "source": "https://t.me/GithubRedTeam/79221", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21717\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dajneem23\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Zig\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 08:35:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-07T09:00:05.000000Z"}, {"uuid": "3e75f4d0-178c-48fc-8fd0-e2fcbf4857f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21719", "type": "seen", "source": "Telegram/tG2JfBYkK87mHaeOPjoo4KUh_b5Z5XakpvfcfSoidkAS14Y", "content": "", "creation_timestamp": "2026-04-17T07:16:22.000000Z"}, {"uuid": "88367cd8-fa1b-49b0-9065-be2acd2ca35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21710", "type": "seen", "source": "Telegram/3uob0OgNXCPySF5ZgiHiYbQAvLr6RIUarGC854yFCH2MAgQ", "content": "", "creation_timestamp": "2026-03-30T21:21:40.000000Z"}, {"uuid": "fa11fe6e-94b9-4340-af84-43b236a13d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21714", "type": "seen", "source": "https://t.me/securixy_kz/1356", "content": "\ud83e\udde8 npm \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442: \u0410\u043f\u0440\u0435\u043b\u044c 2026 \n\n\u0414\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \n\n\u2620\ufe0f Axios - supply chain \u043e\u0442 Sapphire Sleet (UNC1069)\n\n\u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0446\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u043c\u0435\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.}\n\u0412\u0435\u0440\u0441\u0438\u0438 1.14.1 \u0438 0.30.4 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c plain-crypto-js, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0447\u0435\u0440\u0435\u0437 postinstall \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 RAT \u043d\u0430 Windows / macOS / Linux.\n\u0426\u0435\u043b\u044c: AWS/Azure-\u043a\u043b\u044e\u0447\u0438, GitHub-\u0442\u043e\u043a\u0435\u043d\u044b, env-\u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435.\n\u26a0\ufe0f \u041f\u0430\u043a\u0435\u0442 - 70+ \u043c\u043b\u043d \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0439 \u0432 \u043d\u0435\u0434\u0435\u043b\u044e.\n\ud83d\udee1 \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430 1.14.0 / 0.30.3, \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\ud83d\udd27 npm ci --ignore-scripts \u043a\u0430\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0435\u0440\u0430.\n\ud83d\udd17 Microsoft Security Blog | SANS\n\n\ud83d\udc22 TeamPCP - \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0434\u0435\u0440\u0435\u0432\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\u0416\u0435\u0440\u0442\u0432\u044b: Trivy, KICS, \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 npm-\u0443\u0442\u0438\u043b\u0438\u0442\u044b.\n\ud83d\udd17 Zscaler ThreatLabz\n\n\ud83d\udcf1 React Native - \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b\n\n\u0417\u0430\u0440\u0430\u0436\u0435\u043d\u044b react-native-international-phone-number \u0438 react-native-country-select.\n\u0410\u0442\u0430\u043a\u0430 \u0432 \u0442\u0440\u0438 \u0432\u043e\u043b\u043d\u044b: \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u2192 \u0441\u0442\u0435\u0439\u0434\u0436\u0435\u0440 \u2192 \u043f\u0435\u0439\u043b\u043e\u0430\u0434.\n\ud83d\udea9 IOC \u0432 package-lock.json: \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 @agnoliaarisian7180/* \u0438\u043b\u0438 @usebioerhold8733/*\n\ud83d\udd17 StepSecurity Report\n\n\ud83d\udd29 Node.js \u043f\u0430\u0442\u0447\u0438 (\u043c\u0430\u0440\u0442-\u0430\u043f\u0440\u0435\u043b\u044c 2026)\n\nCVE-2026-21714 - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP/2, DoS \u0447\u0435\u0440\u0435\u0437 WINDOW_UPDATE\nCVE-2026-21713 - \u0442\u0430\u0439\u043c\u0438\u043d\u0433-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 HMAC \u0432 Web Crypto API\n\ud83d\udd17 HeroDevs\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441:\n1. \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c Axios \u0441 1.14.1 / 0.30.4\n2. \u0414\u043e\u0431\u0430\u0432\u0438\u0442\u044c -ignore-scripts \u0432 CI/CD\n3. \u0420\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c package-lock.json \u043d\u0430 IOC\u2019s", "creation_timestamp": "2026-07-12T22:00:05.976974Z"}, {"uuid": "a67a892e-f0f3-4dfd-9aa3-e35fe10ec443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21713", "type": "seen", "source": "https://t.me/securixy_kz/1356", "content": "\ud83e\udde8 npm \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442: \u0410\u043f\u0440\u0435\u043b\u044c 2026 \n\n\u0414\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \n\n\u2620\ufe0f Axios - supply chain \u043e\u0442 Sapphire Sleet (UNC1069)\n\n\u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0446\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u043c\u0435\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.}\n\u0412\u0435\u0440\u0441\u0438\u0438 1.14.1 \u0438 0.30.4 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c plain-crypto-js, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0447\u0435\u0440\u0435\u0437 postinstall \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 RAT \u043d\u0430 Windows / macOS / Linux.\n\u0426\u0435\u043b\u044c: AWS/Azure-\u043a\u043b\u044e\u0447\u0438, GitHub-\u0442\u043e\u043a\u0435\u043d\u044b, env-\u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435.\n\u26a0\ufe0f \u041f\u0430\u043a\u0435\u0442 - 70+ \u043c\u043b\u043d \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0439 \u0432 \u043d\u0435\u0434\u0435\u043b\u044e.\n\ud83d\udee1 \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430 1.14.0 / 0.30.3, \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\ud83d\udd27 npm ci --ignore-scripts \u043a\u0430\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0435\u0440\u0430.\n\ud83d\udd17 Microsoft Security Blog | SANS\n\n\ud83d\udc22 TeamPCP - \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0434\u0435\u0440\u0435\u0432\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\u0416\u0435\u0440\u0442\u0432\u044b: Trivy, KICS, \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 npm-\u0443\u0442\u0438\u043b\u0438\u0442\u044b.\n\ud83d\udd17 Zscaler ThreatLabz\n\n\ud83d\udcf1 React Native - \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b\n\n\u0417\u0430\u0440\u0430\u0436\u0435\u043d\u044b react-native-international-phone-number \u0438 react-native-country-select.\n\u0410\u0442\u0430\u043a\u0430 \u0432 \u0442\u0440\u0438 \u0432\u043e\u043b\u043d\u044b: \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u2192 \u0441\u0442\u0435\u0439\u0434\u0436\u0435\u0440 \u2192 \u043f\u0435\u0439\u043b\u043e\u0430\u0434.\n\ud83d\udea9 IOC \u0432 package-lock.json: \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 @agnoliaarisian7180/* \u0438\u043b\u0438 @usebioerhold8733/*\n\ud83d\udd17 StepSecurity Report\n\n\ud83d\udd29 Node.js \u043f\u0430\u0442\u0447\u0438 (\u043c\u0430\u0440\u0442-\u0430\u043f\u0440\u0435\u043b\u044c 2026)\n\nCVE-2026-21714 - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP/2, DoS \u0447\u0435\u0440\u0435\u0437 WINDOW_UPDATE\nCVE-2026-21713 - \u0442\u0430\u0439\u043c\u0438\u043d\u0433-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 HMAC \u0432 Web Crypto API\n\ud83d\udd17 HeroDevs\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441:\n1. \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c Axios \u0441 1.14.1 / 0.30.4\n2. \u0414\u043e\u0431\u0430\u0432\u0438\u0442\u044c -ignore-scripts \u0432 CI/CD\n3. \u0420\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c package-lock.json \u043d\u0430 IOC\u2019s", "creation_timestamp": "2026-07-12T22:00:06.002234Z"}, {"uuid": "5a3e33b3-84a7-48c4-a3b6-b20d46205c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21714", "type": "seen", "source": "https://t.me/securixy_kz/1356", "content": "\ud83e\udde8 npm \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442: \u0410\u043f\u0440\u0435\u043b\u044c 2026 \n\n\u0414\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \n\n\u2620\ufe0f Axios - supply chain \u043e\u0442 Sapphire Sleet (UNC1069)\n\n\u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0446\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u043c\u0435\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.}\n\u0412\u0435\u0440\u0441\u0438\u0438 1.14.1 \u0438 0.30.4 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c plain-crypto-js, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0447\u0435\u0440\u0435\u0437 postinstall \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 RAT \u043d\u0430 Windows / macOS / Linux.\n\u0426\u0435\u043b\u044c: AWS/Azure-\u043a\u043b\u044e\u0447\u0438, GitHub-\u0442\u043e\u043a\u0435\u043d\u044b, env-\u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435.\n\u26a0\ufe0f \u041f\u0430\u043a\u0435\u0442 - 70+ \u043c\u043b\u043d \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0439 \u0432 \u043d\u0435\u0434\u0435\u043b\u044e.\n\ud83d\udee1 \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430 1.14.0 / 0.30.3, \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\ud83d\udd27 npm ci --ignore-scripts \u043a\u0430\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0435\u0440\u0430.\n\ud83d\udd17 Microsoft Security Blog | SANS\n\n\ud83d\udc22 TeamPCP - \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0434\u0435\u0440\u0435\u0432\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\u0416\u0435\u0440\u0442\u0432\u044b: Trivy, KICS, \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 npm-\u0443\u0442\u0438\u043b\u0438\u0442\u044b.\n\ud83d\udd17 Zscaler ThreatLabz\n\n\ud83d\udcf1 React Native - \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b\n\n\u0417\u0430\u0440\u0430\u0436\u0435\u043d\u044b react-native-international-phone-number \u0438 react-native-country-select.\n\u0410\u0442\u0430\u043a\u0430 \u0432 \u0442\u0440\u0438 \u0432\u043e\u043b\u043d\u044b: \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u2192 \u0441\u0442\u0435\u0439\u0434\u0436\u0435\u0440 \u2192 \u043f\u0435\u0439\u043b\u043e\u0430\u0434.\n\ud83d\udea9 IOC \u0432 package-lock.json: \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 @agnoliaarisian7180/* \u0438\u043b\u0438 @usebioerhold8733/*\n\ud83d\udd17 StepSecurity Report\n\n\ud83d\udd29 Node.js \u043f\u0430\u0442\u0447\u0438 (\u043c\u0430\u0440\u0442-\u0430\u043f\u0440\u0435\u043b\u044c 2026)\n\nCVE-2026-21714 - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP/2, DoS \u0447\u0435\u0440\u0435\u0437 WINDOW_UPDATE\nCVE-2026-21713 - \u0442\u0430\u0439\u043c\u0438\u043d\u0433-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 HMAC \u0432 Web Crypto API\n\ud83d\udd17 HeroDevs\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441:\n1. \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c Axios \u0441 1.14.1 / 0.30.4\n2. \u0414\u043e\u0431\u0430\u0432\u0438\u0442\u044c -ignore-scripts \u0432 CI/CD\n3. \u0420\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c package-lock.json \u043d\u0430 IOC\u2019s", "creation_timestamp": "2026-07-13T00:00:16.486614Z"}, {"uuid": "0a612ec3-1b28-4bc8-a3b4-2d00028d3c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21713", "type": "seen", "source": "https://t.me/securixy_kz/1356", "content": "\ud83e\udde8 npm \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442: \u0410\u043f\u0440\u0435\u043b\u044c 2026 \n\n\u0414\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \n\n\u2620\ufe0f Axios - supply chain \u043e\u0442 Sapphire Sleet (UNC1069)\n\n\u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0446\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u043c\u0435\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.}\n\u0412\u0435\u0440\u0441\u0438\u0438 1.14.1 \u0438 0.30.4 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c plain-crypto-js, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0447\u0435\u0440\u0435\u0437 postinstall \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 RAT \u043d\u0430 Windows / macOS / Linux.\n\u0426\u0435\u043b\u044c: AWS/Azure-\u043a\u043b\u044e\u0447\u0438, GitHub-\u0442\u043e\u043a\u0435\u043d\u044b, env-\u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435.\n\u26a0\ufe0f \u041f\u0430\u043a\u0435\u0442 - 70+ \u043c\u043b\u043d \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0439 \u0432 \u043d\u0435\u0434\u0435\u043b\u044e.\n\ud83d\udee1 \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430 1.14.0 / 0.30.3, \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\ud83d\udd27 npm ci --ignore-scripts \u043a\u0430\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043c\u0435\u0440\u0430.\n\ud83d\udd17 Microsoft Security Blog | SANS\n\n\ud83d\udc22 TeamPCP - \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0434\u0435\u0440\u0435\u0432\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\u0416\u0435\u0440\u0442\u0432\u044b: Trivy, KICS, \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 npm-\u0443\u0442\u0438\u043b\u0438\u0442\u044b.\n\ud83d\udd17 Zscaler ThreatLabz\n\n\ud83d\udcf1 React Native - \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b\n\n\u0417\u0430\u0440\u0430\u0436\u0435\u043d\u044b react-native-international-phone-number \u0438 react-native-country-select.\n\u0410\u0442\u0430\u043a\u0430 \u0432 \u0442\u0440\u0438 \u0432\u043e\u043b\u043d\u044b: \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u2192 \u0441\u0442\u0435\u0439\u0434\u0436\u0435\u0440 \u2192 \u043f\u0435\u0439\u043b\u043e\u0430\u0434.\n\ud83d\udea9 IOC \u0432 package-lock.json: \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 @agnoliaarisian7180/* \u0438\u043b\u0438 @usebioerhold8733/*\n\ud83d\udd17 StepSecurity Report\n\n\ud83d\udd29 Node.js \u043f\u0430\u0442\u0447\u0438 (\u043c\u0430\u0440\u0442-\u0430\u043f\u0440\u0435\u043b\u044c 2026)\n\nCVE-2026-21714 - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP/2, DoS \u0447\u0435\u0440\u0435\u0437 WINDOW_UPDATE\nCVE-2026-21713 - \u0442\u0430\u0439\u043c\u0438\u043d\u0433-\u0430\u0442\u0430\u043a\u0430 \u043d\u0430 HMAC \u0432 Web Crypto API\n\ud83d\udd17 HeroDevs\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441:\n1. \u041e\u0442\u043a\u0430\u0442\u0438\u0442\u044c Axios \u0441 1.14.1 / 0.30.4\n2. \u0414\u043e\u0431\u0430\u0432\u0438\u0442\u044c -ignore-scripts \u0432 CI/CD\n3. \u0420\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c package-lock.json \u043d\u0430 IOC\u2019s", "creation_timestamp": "2026-07-13T00:00:16.512821Z"}]}