coalmine

클라우드 카나리 토큰 관리 — AWS와 GCP에 걸쳐 가짜 자격증명을 배포, 모니터링, 교체하여 무단 접근을 탐지합니다. !WARNING 알파 버전 — Coalmine은 초기 개발 단계입니다. 기본 기능이 현재 우선순위이며, 애플리케이션은 프로덕션 사용을 위해 완전한 보안 테스트를 거친 것으로 간주되어서는 안 됩니다. 상태 기능| 개발 중 불안정| 할 일 ---|---|--- AWS IAM User Canaries| GCP Service Account Canaries| Azure 지원 AWS S3 Bucket Canaries|...

teampcp-supply-chain-attack

TeamPCP 공급망 공격: 기술 분석 및 탐지 가이드 CVE-2026-33634 CVSS 9.4 — 2026년 현재까지 가장 영향력이 큰 CI/CD 공급망 공격. 2026년 3월 19일부터 25일 사이, 위협 행위자 TeamPCPDeadCatx3, PCPcat, ShellForce, CanisterWorm으로도 추적됨는 GitHub Actions, Docker Hub, OpenVSX, npm, PyPI 등 5개 생태계에 걸친 연쇄적 공급망 손상을 실행했습니다. 불완전하게 순환된 단일 GitHub PAT에서 시작된 이 캠페인은...

mcp-security-checklist

🔐 Чек-лист безопасности MCP Практический, поддерживаемый сообществом чек-лист безопасности для команд, создающих и развертывающих серверы Model Context Protocol MCP и инфраструктуру AI-агентов. Зачем это нужно MCP быстро внедряется. Руководства по безопасности отстают. Этот чек-лист предоставляет...

MAL-2026-16089 Malicious code in raydium-clmm-sdk (npm)

raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...

Malicious code in krdpass-auth-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...

MAL-2026-15648 Malicious code in @fdr-mar/promos-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff10da2d93550bf81006c507400661d5d6d163e7ed31fd2dabc6c3d9be805e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

Malicious code in 3layerdipstack1igc1l (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f377c60953bae14cc75545afcab2dfdaff56f29f0f13abc7424ee4a163505805 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14668 Malicious code in 3layerdipstack8yfoyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dd84ecfadffe762f801df8835edd82d85918ddc082406e3ace09dffa3dc0a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackbz1nv9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f476e04aa8223211da688c991805ba888578ea3b1dcefd32c455e7c7cf24f6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackc6c5kn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5095fa04b6e4feb276e9a1376a4b4c7644115b5ffc5021f55edbf5c5646d2c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14685 Malicious code in 3layerdipstackaac4df (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0bb9bed9084299a78c5e02a3445db4714cb438a527dd9d0198f6d1d96610e4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14927 Malicious code in 3layerdipstacktc0tq7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e08bf9444f045afb089203c34015ace9ed96effd7dfd69152a49ef1596795d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14782 Malicious code in 3layerdipstackiud1lz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bfbdce5458620287aecad1c66caa8c2effa5af255fe4787bffd153024b505d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackq4ek0f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d889748f378b114bb74220ed9ecf1dfbf2548c5126539fe997b409e201c4b23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14677 Malicious code in 3layerdipstack9nawzv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69be0b13e8c0686a5610a86df340163be1a4a20c3b23d823333512e165fc921b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14560 Malicious code in inspectstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc87250d7ea2211f538d56ca04d81a6653e6493beb475ea371873ddfe6a65e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in desmoswork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92541d82d133f0d80ad0e7dd4dc1595038f64af50558f26398c0a1c3627928aa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-13668 Malicious code in @lambda-platform/lambda-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a4d9bac602cd3fca6afbcee8dde788580934920352178864343fab46fa64b No static or traced-code signals of exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or...

Malicious code in @simplipayng/checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ead1207956df050d2746ae899d5ea9132fbc4c35684f9e992599c5ef10259c The bundled main dist/index.js executes an evalatob... blob at module top level, so any Node-side require of the package SSR, tests, Next.js server...