MAL-2026-16404 Malicious code in sysverify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edfe23ae0c8a79c155c23e410616585061296886bb752d734feb1b2180ffc82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in sysverify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edfe23ae0c8a79c155c23e410616585061296886bb752d734feb1b2180ffc82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16401 Malicious code in ndmckauxuoincv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd29f430051fb1e4809ff59728851a683aa0fc25eabec2f807067e928245222 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16402 Malicious code in ndmcmsujey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d10bd4751b8aa4de0e747f955230af0c50c2df3f6423f0a88cbcf392d0410d8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in ndmcmsujey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d10bd4751b8aa4de0e747f955230af0c50c2df3f6423f0a88cbcf392d0410d8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in ndmcjcxiebysfdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6d78591ddbd2abc8045f5bdbe7694d000b3508dc8df6393ffd46d093351ef4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in ndmckauxuoincv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd29f430051fb1e4809ff59728851a683aa0fc25eabec2f807067e928245222 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16399 Malicious code in lufxchwmxwyps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429d0ebe2bf5d42b37720d76547ef6105c01c3276283fd64836d42ed209d732a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16396 Malicious code in fdhcxvnwhjiofv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7125babb23f8900d46ed2c500ef373d4de463c6260810c17719922435bdac54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16398 Malicious code in luftmvfiwgxydes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e487d10b32b0e42f4ed6478fa461451bcacc8eb9d679a58931bc474c339feae7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16397 Malicious code in kambxjowhdsgyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966589b88833a788509808e69f3fd935c370ff4093b9fc3fb50482431434a6b5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in luftmvfiwgxydes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e487d10b32b0e42f4ed6478fa461451bcacc8eb9d679a58931bc474c339feae7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in kambxjowhdsgyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966589b88833a788509808e69f3fd935c370ff4093b9fc3fb50482431434a6b5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in lufxchwmxwyps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429d0ebe2bf5d42b37720d76547ef6105c01c3276283fd64836d42ed209d732a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-94456

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence AI "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the...

mvt v2026.9.21

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

USN-8802-1 linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8802-1: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8729-4 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...