CVE-2026-92705

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

EUVD-2026-95988

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-92705

The cross-platform subtitle editor Aegisub (versions 3.2.0 to 3.4.2) is vulnerable to arbitrary code execution because it automatically loads Automation scripts referenced in ASS project metadata without verifying user trust. An attacker can distribute a crafted ASS file and a malicious script to...

Malicious Package

Overview ue-automation-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-6730 Malicious code in ue-automation-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc2db9a2a365d53d76fe7ca2a8f219f98118d99b53698cf7ce8b31cf81eda3f Package name 'ue-automation-scripts' with version 99999.0.0 is the canonical dependency-confusion shape used to hijack installs on internal CI system...

Malicious code in ue-automation-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc2db9a2a365d53d76fe7ca2a8f219f98118d99b53698cf7ce8b31cf81eda3f Package name 'ue-automation-scripts' with version 99999.0.0 is the canonical dependency-confusion shape used to hijack installs on internal CI system...

bounty-hunter-framework

Claude Bounty Hunter Framework Professional bug bounty hunt...

wined

Windows Exploitation wined Tools The following scripts were...

MAL-2025-185989 Malicious code in callisto-hyperion-dactyl-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f5fbb4310291c69ae8f62db97f4ea9145c9fcda4341d9b4daa0178186b0d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahiagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7876554b162bfa1f9fe43d51e21df6010eae6f5dc5f9b2d2bdab171ec4efb10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-guta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a808fa4bd39b3275439ec242ba28e51d6b7b6bf5129d8cbe5eaf3a82a9866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163080 Malicious code in nokire-namiresan29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05aa026772b74366ca700e98a23862351eb4eff46db2a578bd12ef262cb9b634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-registry-sedna-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-cypress-barnard-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584710c1eaf8a441754ad3e405f836dcdb39575b9f1ad09350fad789bb04c0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130739 Malicious code in udin-kepok1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668c40ef606975e37e88d68a96533235817dafde794d0455101ad6de56d06bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116530 Malicious code in putri-botok20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec3e54844f8c8bd2e230eb881550625664c2c2330838c5fa249839f86d0a5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107808 Malicious code in reginald-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6d9e55134e59c28ec81cdd9ed3749d3184fadae6609a548d8aa1f1e96ce257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-gembus74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691ea7d77633d97550a2c6187c432cb449a4218d25c912f46b766c8a5ac0b488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...