170070 matches found
Malicious code in pf25133 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504c3f95c937a05e14c220c767a0e18f4cada866ee5eebad0749457232ace73b The package's declared main module index.js is an IIFE that reads document.cookie, fetches a hardcoded list of application paths, extracts flag-shape...
MAL-2026-16339 Malicious code in pf25133 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504c3f95c937a05e14c220c767a0e18f4cada866ee5eebad0749457232ace73b The package's declared main module index.js is an IIFE that reads document.cookie, fetches a hardcoded list of application paths, extracts flag-shape...
MAL-2026-16334 Malicious code in keroeltopgg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b4e331f9f02f436e01e5c7696088d12ea3237af7fbe54fd37ec37e786c960d [email protected] is a stub package whose index.js, executed on require/import, reads os.hostname and issues an HTTPS GET to the hardcoded collect...
Malicious code in keroeltopgg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b4e331f9f02f436e01e5c7696088d12ea3237af7fbe54fd37ec37e786c960d [email protected] is a stub package whose index.js, executed on require/import, reads os.hostname and issues an HTTPS GET to the hardcoded collect...
Malicious code in keroeltopkkk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758c1a2619db534fdc8e2981e051769b20641492d12ff984e333446e0c734e3 The package ships a single server.js that is wired into every npm lifecycle hook preinstall, install, postinstall, prepare, prepublish, preprepare,...
MAL-2026-16336 Malicious code in keroeltopkkk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758c1a2619db534fdc8e2981e051769b20641492d12ff984e333446e0c734e3 The package ships a single server.js that is wired into every npm lifecycle hook preinstall, install, postinstall, prepare, prepublish, preprepare,...
MAL-2026-16337 Malicious code in my-cdn-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e634f64d71797bbefdaf62bd0f2092d1cace77af2a07fd41e7d2347a14bb001b [email protected] ships a client-side payment-card skimmer in script.js. When loaded on a checkout page, the script injects a fake card-input form...
Malicious code in my-cdn-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e634f64d71797bbefdaf62bd0f2092d1cace77af2a07fd41e7d2347a14bb001b [email protected] ships a client-side payment-card skimmer in script.js. When loaded on a checkout page, the script injects a fake card-input form...
papers-we-love
Papers We Love PWL is a community built around reading, discussing and learning more about academic computer science papers. This repository serves as a directory of some of the best papers the community can find, bringing together documents scattered across the web. You can also visit the Papers...
MAL-2026-16327 Malicious code in catwrestlingbird (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80958afe2056e1a124791c9465abdb0fff080a33005cc332dd5c1869ab2ee4c0 [email protected] declares a postinstall script node install.js that automatically runs on npm install. install.js collects installer host...
Malicious code in catwrestlingbird (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80958afe2056e1a124791c9465abdb0fff080a33005cc332dd5c1869ab2ee4c0 [email protected] declares a postinstall script node install.js that automatically runs on npm install. install.js collects installer host...
Malicious code in chai-as-viem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397fee7b80d73ee4c82892a746b2bab33a4cd2f71ef1ec4fe6fbbaa0bb270308 On require of the package, index.js loads lib/initializeCaller.js, which runs an IIFE at module load. The IIFE decodes a base64-concealed URL resolvi...
MAL-2026-16329 Malicious code in chai-as-viem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397fee7b80d73ee4c82892a746b2bab33a4cd2f71ef1ec4fe6fbbaa0bb270308 On require of the package, index.js loads lib/initializeCaller.js, which runs an IIFE at module load. The IIFE decodes a base64-concealed URL resolvi...
ConditionalAccessDocumentation
Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...
CVE-2025-29824
🔥 CVE-2025-29824 Zero-Day Exploit 🔥 Welcome to the dark heart of cyberspace, where ethical boundaries bend under the weight of forbidden knowledge. This repository contains a proof-of-concept PoC exploit for CVE-2025-29824 , a use-after-free UAF vulnerability in the Windows Common Log File System...
clamav
ClamAV ClamAV® is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats. Documentation & FAQ ClamAV documentation is hosted at docs.clamav.net. The source archive for each release also includes a copy of the documentation for offline reading. You can...
wch-ch56x-lib
wch-ch56x-lib This library was built alongside Hydradancer, a new backend for the Facedancer USB emulation library based on the WCH569 chip. Reliable drivers were needed for this project and many features were missing from the WCH examples or untested. This library provides USB3, USB2, HSPI and...
hatiyar
Hatiyar Modern security toolkit for penetration testing, vulnerability assessment, and security research. ⚠️ IMPORTANT: Hatiyar is intended for educational, research, and defensive security use only. Do not use this software on systems you do not own or do not have explicit written permission to...
tetragon
Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...
gundog
gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...