MAL-2026-13259 Malicious code in chatcc-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a69e686f3f793120840abd296a10a4b1c8d734797607e7dce82a82e90cf7cf0 chatcc-agent runs a daemon that connects to Tencent Cloud IM as a WebSocket client and treats inbound peer messages of type 'terminalcommand',...

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane for teams of artificial intelligence AI agents, and both paths rely on importing a malicious agent and starting it. A third flaw could expo...

MAL-2026-13272 Malicious code in devplatform-vite-plugin-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a591855b5f44a53d20e6258728aeb5c0254fb10dac285f579fffcfc97608061 The package's main entry index.js unconditionally requires./setup on load. setup.js selects an OS/arch-specific endpoint and downloads a binary from ...

Malicious code in bnpl-blocks-atom-desktop-bnpl-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007bafa1def88d10e8f2c247e0ab1d0872d2a4f33f4bb134fe46877f75aa9eca On require, index.js unconditionally loads polyfill.js, which selects a platform-specific asset path and fetches an opaque binary from one of three...

MAL-2026-12994 Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...

MAL-2026-13042 Malicious code in boxy-esm-shims (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f8bbecdfed31ec416782f6de127cb1003692978560504d748acd121b30fa3b On require of the package, index.js loads vendor.js which fetches an opaque binary from string-obfuscated Cloudflare Workers hosts...

MAL-2026-13045 Malicious code in boxy-fixture-paperclip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a47f722fb30af7936e07182fa5fb42ecfd7efbacadd970a148a8a7daefc8e2 On any require/import, index.js loads adapter.js, which selects a platform-specific asset and downloads an opaque binary from a rotating set of...

MAL-2026-12679 Malicious code in delivery-ci-quality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a7deac8b6933e5d38da84c365f65ac4fbcf7b3a26825914d19ca7aeafcf516 On require of the package, index.js unconditionally loads compat.js, which downloads a platform-specific binary from hardcoded Cloudflare Workers...

Malicious code in devplatform-nx-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4cd991fb1b5e2308797829d38de8ba8b673c91a889e800621d01faef34610d devplatform-nx-husky is a typosquat blending the nx and husky ecosystem terms; its exported class is an inert no-op and the package has no legitimate...

MAL-2026-12505 Malicious code in @kyronixai/executer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b2b754238c0894255adde45556c981418ba0ddc726afe30cc94f514f255297 The package's public API opens a WebSocket to the hardcoded endpoint wss://kyronix.harshitnakrani.me/ws/executer and dispatches incoming...

CVE-2026-67623 Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --porcelain without suppressing hook...

CVE-2026-71284

Fledge's backup-restore upload handler, uploadbackup python/fledge/services/core/api/backuprestore.py, takes the first extracted tar member's filename tarfilenames0 and builds a shell command via string formatting. Because os.system invokes a shell and no quoting shlex.quote, list-form subprocess...

MAL-2026-12793 Malicious code in helixbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45774464be73a3ba586a4eb9af5a89b3f2439a4f49a80c0b69eb4668cfcf7f89 The helixbox-connect bin opens a WebSocket to the hardcoded relay wss://helixbox-relay.onrender.com and dispatches messages from the peer into local...

Malicious code in gcli-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...

MAL-2026-12502 Malicious code in gcli-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...

Malicious code in @zahlen/checkout-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097440ff1155e4d840568cf0fc8502c00d43249340f0f301167a859fd34c9fe8 The package's main module contains a top-level block that runs on every require/import. It uses unicode-escape obfuscation \uXXXX to hide imports of...

MAL-2026-12333 Malicious code in @zahlen/checkout-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097440ff1155e4d840568cf0fc8502c00d43249340f0f301167a859fd34c9fe8 The package's main module contains a top-level block that runs on every require/import. It uses unicode-escape obfuscation \uXXXX to hide imports of...

CVE-2026-71289

The CVE affects NASA-AMMOS ANMS and JHUAPL-DTNMA/dtnma-tools. The default docker-compose setup exposes the amp-manager REST API on the host network (port 8089) with NET_ADMIN/NET_RAW/SYS_NICE and bypasses the CAM gateway, placing the REST server (CivetWeb, nm_rest.c) in a state where enable_auth_...

CVE-2026-71284

Fledge's backup-restore upload handler, uploadbackup python/fledge/services/core/api/backuprestore.py, takes the first extracted tar member's filename tarfilenames0 and builds a shell command via string formatting. Because os.system invokes a shell and no quoting shlex.quote, list-form subprocess...

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-34459 DESCRIPTION: An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a...