110 matches found
Security Advisory 0151
Security Advisory 0151 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73451 CVSS:3.1 Base Score: 4.8...
Schneider Electric NetBotz 5 750/755
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
Malicious code in bigops-procedure-player (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e28923577eff8eba09d7ebbd941220727c1851cf46ef25f4de8960070ad33bb On require, index.js loads loader.js, which reconstructs delivery hostnames at runtime via array.join"" e.g. oob-worker.cf102-baf.workers.dev,...
Malicious code in dolyame-ui-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74520fb069fe50500e9094c4e509d06ab266bda101111701e409951e08053e9 On require of the package, index.js loads shim.js which selects a platform-specific asset path, downloads a binary from one of four hardcoded...
MAL-2026-13195 Malicious code in dolyame-ui-themes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c23ba8923130746ecc1e526c3a0ee8961ea764dd90d0da71236444d978ce27 dolyame-ui-themes ships a loader.js that is required from the package main index.js at module load. The loader reconstructs C2 hostnames from split...
MAL-2026-12839 Malicious code in bigops-tcrm-permissions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20b19aa6d3666cf99d03011aefd683f0d560b45dac6f27c2915dd68dd95bc0d On require of bigops-tcrm-permissions, index.js loads runtime.js which fetches a platform-specific binary from hardcoded Cloudflare Workers hosts...
Malicious code in bnpl-blocks-atom-bnpl-fade-overflow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78c9360e199f852a5b395b6549e12b6334ec3dce096462a4404a3a0e809f545 On require of this package, index.js loads runtime.js which selects a platform-specific payload path, fetches bytes over HTTPS from...
Malicious code in bnpl-blocks-post-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5d8d3c9328912323fee5066e4c32c14904ec3e8b1800f66da0d1749babda0c On require, polyfill.js reconstructs attacker-controlled hostnames from string-split fragments oob-worker.cf103-070.workers.dev, with a DNS-TXT...
Malicious code in checkout-accounts-holder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd25bb3af3a1501bd4ea34cf95d79c43340a06ff801f144564819e3bf8bf078a On require'checkout-accounts-holder', index.js loads platform.js which immediately downloads a platform-specific binary over HTTPS from hostnames...
MAL-2026-12476 Malicious code in tcb-web-header (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115bda849ee7aff33e1ccc649f492e892e31243bfb026eea8048c158c885bdf0 On require of tcb-web-header, platform.js selects an OS/arch-specific endpoint, downloads a binary from Cloudflare workers.dev hosts whose names are...
MAL-2026-12160 Malicious code in bigops-cobrowsing-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ce2f0f7a7411a7bfedb5d07449d26620388d3936e5951883e52463de01ef50 On require of this package, index.js loads shim.js which triggers an async payload that fetches a platform-specific binary from obfuscated Cloudflare...
MiracleLinux 7 : squid-3.3.8-26.el7 (AXSA:2015-755:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2015-755:01 advisory. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid...
Malicious Package
Overview elf-stats-silvered-mailbag-755 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious code in elf-stats-silvered-mailbag-755 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2884de8cbf4bfb4035980a2653820e5bc35566219b001a8be0460c255e24c379 The package elf-stats-silvered-mailbag-755 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-202915
Malicious code in elf-stats-silvered-mailbag-755 npm...
MAL-2025-192445 Malicious code in elf-stats-silvered-mailbag-755 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2884de8cbf4bfb4035980a2653820e5bc35566219b001a8be0460c255e24c379 The package elf-stats-silvered-mailbag-755 was found to contain malicious code. Source: ghsa-malware...
EUVD-2019-16395
Malware in sbrugna...
EUVD-2019-16396
Malware in sbrugna...