Malicious code in @dransay/logger (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

MAL-2026-17697 Malicious code in @dransay/logger (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

Malicious code in hardhat-promised (npm)

Source: amazon-inspector 306eed59a2a4d15563101a3bfde19c1d6d5e0c9152cb0f3d0f421331e075ef4e The npm package hardhat-promised impersonates the pino logger: it ships pino's README with pino shields.io badges linking to npmjs.com/package/pino, LICENSE, docs/, index.d.ts, and lib/ directory layout...

Malicious code in hardhat-promised (npm)

[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...

appkernel (>=0.1.0, <=1.0.0), cg (>=12.1.3, <=16.3.4) +9 more potentially affected by CVE-2026-96749 via pymongo (3.6.1)

pymongo PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - appkernel =0.1.0, =12.1.3, =0.0.1, =0.0.6, =1.5.0, =0.0.1, =1.0.0, =4.1.1, =0.0.29, =0.0.1, =0.0.2 Source cves: CVE-2026-96749 Source advisory:...

Astra Linux – Vulnerability in Wireshark

The TTX logger file parser crashes in versions 4.6.0 to 4.6.7, allowing denial of service...

CVE-2026-78242

The Apache APISIX gateway (version 3.17.0 ) is susceptible to an insertion of sensitive information into log files vulnerability. Under specific response structures, the data-mask component may fail to redact request headers, resulting in unmasked header values being written to the log sink. To r...

CVE-2026-78242 Apache APISIX: data-mask may fail to redact request headers in logger output

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0,...

Malicious Package

Overview chai-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Klever-Go: /log controls global node logging

An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...

Malicious Package

Overview chai-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in @client-web-next/logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16504 Malicious code in @client-web-next/logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566e54855d730e8555b93da4f8ea81faba72645079a7adcc3a05ea8bf8ad8ee6 The package presents itself as a Chai logging plugin but its main entry index.js requires ./lib/query.js, a 4 MB obfuscator.io-encoded module...

MAL-2026-16380 Malicious code in chai-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566e54855d730e8555b93da4f8ea81faba72645079a7adcc3a05ea8bf8ad8ee6 The package presents itself as a Chai logging plugin but its main entry index.js requires ./lib/query.js, a 4 MB obfuscator.io-encoded module...

Malicious Package

Overview linkedin-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

deployme (>=0.1.0, <=0.5.0), limiter-for-sanic (>=0.0.7, <=0.1.0) +4 more potentially affected by CVE-2026-85078 via sanic (22.9.1)

sanic PYPI version 22.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - deployme =0.1.0, =0.0.7, =0.0.1, =0.0.47, =0.4.10 - mljet 0.7.0 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

TTX Logger DoS

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

elfo (>=0.2.0-alpha.3, <=0.2.0-alpha.11), elfo-configurer (>=0.2.0-alpha.0, <=0.2.0-alpha.15) +7 more potentially affected by unknown CVE via unicycle (0.9.4)

unicycle CARGO version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on unicycle and may be impacted: - elfo =0.2.0-alpha.3, =0.2.0-alpha.0, =0.2.0-alpha.0, =0.2.0-alpha.0, =0.2.0-alpha.0, =0.2.0-alpha.6, =0.2.0-alpha.0, =0.2.0-alpha.0,...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...