18491 matches found
Malicious code in solana-web3-stable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38824d7f6044fd3177aba408a5f815879762d8829e56cb6692e2cad652f7d9e6 Package name 'solana-web3-stable' closely resembles the widely-used @solana/web3.js library, raising typosquat concern. The bundled lib/index.cjs.js...
MAL-2026-10900 Malicious code in solana-web3-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912cb41aa6b78cf62207dbf95f7d6247238483a800fa9bc6edd9b9d9f7819364 Package name appears to fork or imitate the well-known @solana/web3.js library. Bundled files lib/index.cjs.js and lib/index.esm.js contain...
MAL-2026-10895 Malicious code in exodus-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51394e5297d9dc765ee318eabd49e400b9f843c342ed91e3df9bd9befc84254e Package is self-identified as a dependency-confusion proof-of-concept. Its postinstall hook src/canary.js performs a DNS lookup and HTTPS GET to a...
MAL-2026-10892 Malicious code in claude-code-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...
MAL-2026-10873 Malicious code in @dxcl/customer-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10914 Malicious code in my_shoaib_gem (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...
MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...
CERTFR-2026-ACT-031
creationtimestamp| type| source ---|---|--- 2026-07-20 08:34:42+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mr2v5ko7qq2g 2026-07-20 08:51:10+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mr2w2zlyeq2b 2026-07-20 08:51:16+00:00| seen|...
CVE-2026-63833
creationtimestamp| type| source ---|---|--- 2026-07-19 16:20:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz6p2prrg2b 2026-07-20 18:42:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3x55gnxp2l 2026-07-20 18:42:57+00:00| seen|...
CVE-2024-58366
creationtimestamp| type| source ---|---|--- 2026-07-18 14:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwicf6c5p2a...
CVE-2026-9323
creationtimestamp| type| source ---|---|--- 2026-07-18 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwicdxykb2z 2026-07-18 15:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjrntoau2w 2026-07-18 16:39:55+00:00| seen|...
CVE-2026-16081
creationtimestamp| type| source ---|---|--- 2026-07-18 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16081 2026-07-18 12:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwaxbosi42q...
CVE-2024-23575
creationtimestamp| type| source ---|---|--- 2026-07-17 17:51:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucusonlo2e...
CVE-2026-10525
creationtimestamp| type| source ---|---|--- 2026-07-17 08:07:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcaltln22e...
CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...
CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...
CVE-2026-47084
creationtimestamp| type| source ---|---|--- 2026-07-16 20:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqs2foa2fl2m...
CVE-2022-25476
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:04+00:00| seen| Telegram/lkTqxrRLFzmZiKWrqHB7ywSYEM6i5xRhttz45dAnhSWBug 2026-07-16 19:00:04+00:00| seen| Telegram/5kmF1XOjEGp2eusQzn0DreB4leSvC4mbJ6rdQEpWsm7WOU 2026-07-17 00:00:26+00:00| published-proof-of-concept|...