124454 matches found
Malicious code in localize-extract (npm)
Source: amazon-inspector 265d3f1cc9dae0e1599e17054e0cebe1481224741d3c3dce5d78916feebd5da2 [email protected] executes a postinstall script that collects host identifiers os.hostname, platform, arch, node version, package name, lifecycle event and POSTs them as JSON to the hardcoded endpoint...
Malicious code in pump-fun-skills (npm)
Source: amazon-inspector 5818b39f1e4fbd315379ea5b32209ab3a57edb3532a948203910b3fb74bec49e The package's postinstall script index.js auto-runs on npm install and collects a broad set of installer-side data — hostname, full process.env, platform/arch, output of whoami/id/uname, /etc/passwd,...
Malicious code in ngsw-config (npm)
Source: amazon-inspector 8b427c73f093ad680033b2779c43c1c96186a71055aaff3cf44befd18c2cecbd The package's postinstall lifecycle script collects installer host identifiers hostname, platform, architecture, Node version, package/lifecycle name, timestamp and POSTs them as JSON to the hardcoded endpoi...
Malicious code in npm-wold (npm)
Source: amazon-inspector 731c22e563f2ea15800d87f345de9b8363c0c715e9f39606201d47a8fb422ab1 [email protected] declares a postinstall script node dist/config.js that, on npm install, issues an HTTPS GET to the hardcoded endpoint https://my-api.trade-api.workers.dev?id=4 and uses fields from the JSON...
Malicious code in novel-suduko (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21725a395742c4e3e10cd14a3c787d7a01d5cea63feec2515310f471d497f8ad The package's postinstall lifecycle script chmods and executes the bundled binary native/hint-linux-amd64 via spawnSyncBIN, , stdio: 'inherit' on eve...
Malicious code in de-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cdcef4435e4bbb8f5841076c9294b934eaebd268286204a37cab9c334a045f package.json declares both a dependencies and devDependencies entry for de-morgan pointing at http://pack.nppacks.com/npm/de-morgan, a non-npm-regist...
CVE-2026-14287
The 10Web Booster (also referred to as TenWeb Speed Optimizer) WordPress plugin, in versions prior to 2.33.5 , is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) . The root cause is a failure to correctly validate an access token on an unauthenticated request handler, combined wit...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
MAL-2026-14262 Malicious code in pump-fun-skills (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5818b39f1e4fbd315379ea5b32209ab3a57edb3532a948203910b3fb74bec49e The package's postinstall script index.js auto-runs on npm install and collects a broad set of installer-side data — hostname, full process.env,...
Malicious code in pump-fun-skills (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5818b39f1e4fbd315379ea5b32209ab3a57edb3532a948203910b3fb74bec49e The package's postinstall script index.js auto-runs on npm install and collects a broad set of installer-side data — hostname, full process.env,...
CVE-2026-23938
A flaw was found in Zabbix. An authenticated administrator can exploit this vulnerability by creating specially crafted JavaScript scripts within preprocessing or script items. This can lead to a denial of service DoS by crashing the Zabbix server or proxy. Mitigation Restrict administrative acce...
CVE-2026-66358
acmailer has a cross-site scripting (XSS) vulnerability allowing an unauthenticated remote attacker to inject arbitrary script. CVSS 3.0 scores it MEDIUM (6.1) with user interaction required. No in-the-wild exploitation or specific affected versions are reported; monitor vendor advisories for pat...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
EUVD-2026-62237
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
Malicious code in localize-extract (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265d3f1cc9dae0e1599e17054e0cebe1481224741d3c3dce5d78916feebd5da2 [email protected] executes a postinstall script that collects host identifiers os.hostname, platform, arch, node version, package name, lifecycl...
MAL-2026-14249 Malicious code in localize-extract (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265d3f1cc9dae0e1599e17054e0cebe1481224741d3c3dce5d78916feebd5da2 [email protected] executes a postinstall script that collects host identifiers os.hostname, platform, arch, node version, package name, lifecycl...
Malicious code in npm-wold (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c22e563f2ea15800d87f345de9b8363c0c715e9f39606201d47a8fb422ab1 [email protected] declares a postinstall script node dist/config.js that, on npm install, issues an HTTPS GET to the hardcoded endpoint...
MAL-2026-14252 Malicious code in npm-wold (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c22e563f2ea15800d87f345de9b8363c0c715e9f39606201d47a8fb422ab1 [email protected] declares a postinstall script node dist/config.js that, on npm install, issues an HTTPS GET to the hardcoded endpoint...
Malicious code in ngsw-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b427c73f093ad680033b2779c43c1c96186a71055aaff3cf44befd18c2cecbd The package's postinstall lifecycle script collects installer host identifiers hostname, platform, architecture, Node version, package/lifecycle name...
MAL-2026-14251 Malicious code in ngsw-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b427c73f093ad680033b2779c43c1c96186a71055aaff3cf44befd18c2cecbd The package's postinstall lifecycle script collects installer host identifiers hostname, platform, architecture, Node version, package/lifecycle name...