MAL-2026-15812 Malicious code in eslint-rxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...

CVE-2021-24274

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:20+00:00| seen| https://t.me/hackingAttack/25377 2026-09-02 01:02:49+00:00| seen| https://t.me/hackingAttack/25377 2026-09-07 13:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/25377 2026-09-08 00:00:45+00:00|...

CVE-2024-10085

Schneider Electric EcoStruxure OPC UA Server Expert is affected by a CWE-770 (Allocation of Resources Without Limits or Throttling) vulnerability that can cause denial of service when a large number of OPC UA requests are sent to the platform. This may result in loss of real-time process data fro...

EUVD-2024-55737

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform...

PALLET CONTROL products vulnerable to improper access control

Overview PALLET CONTROL products provided by JAL Digital Co.,Ltd. include multiple service programs that run in the background and provide certain functions. However, access to these service programs is not properly restricted, allowing non-administrative users to access them. Improper access...

CVE-2024-10085: Allocation of Resources Without Limits or Throttling

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform...

DNSlivery

DNSlivery Easy files and payloads delivery over DNS. DNSlivery Acknowledgments Description TL;DR What problem are you trying to solve? How does it work? Requirements Setup DNS Zone DNSlivery Usage Server Target Acknowledgments This project has been originally inspired by PowerDNS and Joff Thyer's...

Malicious code in verify-contract-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cfabb396e93e034caeb560ea029e3ca2bde784b8c713d5f8941a2b621dd36 The package ships a single bin entry bin/cli.js that, when invoked, runs whoami and POSTs the package name, username, hostname, and platform to a...

MAL-2026-15598 Malicious code in verify-contract-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cfabb396e93e034caeb560ea029e3ca2bde784b8c713d5f8941a2b621dd36 The package ships a single bin entry bin/cli.js that, when invoked, runs whoami and POSTs the package name, username, hostname, and platform to a...

Malicious code in fuels-typegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcadcdf880021763232df96239a6a07acd6360bfcd941ae8026a37aee2eb2f The package name resembles the legitimate @fuel-ts/typegen. On execution of the CLI in bin/cli.js, the code collects the local username whoami /...

MAL-2026-15593 Malicious code in fuels-typegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcadcdf880021763232df96239a6a07acd6360bfcd941ae8026a37aee2eb2f The package name resembles the legitimate @fuel-ts/typegen. On execution of the CLI in bin/cli.js, the code collects the local username whoami /...

Malicious code in verify-contract-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1037ebeeb5eff8da3b46c8275a09151604157ddc24db244d76d27d97bfdddad bin/cli.js executes whoami and reads os.hostname / os.userInfo / os.platform, then POSTs those values to the hardcoded endpoint...

MAL-2026-15599 Malicious code in verify-contract-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1037ebeeb5eff8da3b46c8275a09151604157ddc24db244d76d27d97bfdddad bin/cli.js executes whoami and reads os.hostname / os.userInfo / os.platform, then POSTs those values to the hardcoded endpoint...

MAL-2026-15595 Malicious code in generate-schema-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b43ea1e723ebd0c0ef5c4cd564b106089f9b5f9fd119dcac26dc1e130a14bf Package publishes as generate-schema-viem but exposes a bin named generate-schema-ethers a dependency-confusion / typosquat shape against the...

Malicious code in fuels-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c632848960231dec103d878a13a714e057a5922edcc0398884b6fd6d621e0971 The package's bin script bin/cli.js collects whoami, os.hostname, and os.platform and POSTs them along with the package name to a hardcoded Cloudflar...

MAL-2026-15592 Malicious code in fuels-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c632848960231dec103d878a13a714e057a5922edcc0398884b6fd6d621e0971 The package's bin script bin/cli.js collects whoami, os.hostname, and os.platform and POSTs them along with the package name to a hardcoded Cloudflar...

Malicious code in npx-oob-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6302c47700c024cb727f6139b5cd8703da7c295555525ce9624c12b536f76dde npx-oob-package ships bin/cli.js which is also declared as the package main. On both CLI invocation and any require/import of the package, the module...

MAL-2026-15597 Malicious code in npx-oob-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6302c47700c024cb727f6139b5cd8703da7c295555525ce9624c12b536f76dde npx-oob-package ships bin/cli.js which is also declared as the package main. On both CLI invocation and any require/import of the package, the module...

Malicious code in cacao1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403a43aab3b982d17c5c01d7df45149d796e7185f4137bf4a92675351a1b50e8 The package has no advertised functionality empty description, self-referential dependency on its own name at ^9.9.9. Its package.json declares both...

MAL-2026-14591 Malicious code in cacao1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403a43aab3b982d17c5c01d7df45149d796e7185f4137bf4a92675351a1b50e8 The package has no advertised functionality empty description, self-referential dependency on its own name at ^9.9.9. Its package.json declares both...