DARWIN

🧬 DARWIN Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection An evolutionary attack–defense framework that couples DARWIN-Attack with DARWIN-Guard through online adversarial training. Paper · Guard Checkpoint · Installation · Use DARWIN-Attack · Use DARWIN-Guard ·...

xnu

What is XNU? XNU kernel is part of the Darwin operating system for use in macOS and iOS operating systems. XNU is an acronym for X is Not Unix. XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers...

Malicious code in @liauto/darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c28d1be2a555bd8dfb04c636fbc78a5add132fb5be0bfee0ff204a0d529f770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pkgship/frpc-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b874d42a9f57d771cd4bb2dac536e6ee9278040e89fe7634bffa4b73217336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24787-PoC

CVE-2024-24787-PoC On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive. This is not my bug, I just made a PoC for it. Reference...

MAL-2026-17854 Malicious code in opencode2-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5536c7ac30ec68d1e8ab9f64da77fa154f6d1806df263ad0abaf3af38ab0e378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17853 Malicious code in opencode2-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6a79212b7f12e5d4cae1e3d44b47da54ab2e77545f488b99f6f2dab8a5e638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-darwin-arm64 (>=1.1.0-rc.1, <=1.39.2)

@reasonix/cli-darwin-arm64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...

reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-darwin-x64 (>=1.1.0-rc.1, <=1.39.2)

@reasonix/cli-darwin-x64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...

@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-arm64 (>=7.2.3, <=7.4.0)

@kilocode/cli-darwin-arm64 NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...

@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-x64 (>=7.2.3, <=7.4.0)

@kilocode/cli-darwin-x64 NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...

@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-x64-baseline (>=7.2.3, <=7.4.0)

@kilocode/cli-darwin-x64-baseline NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...

Malicious Package

Overview @postman-cse/okta-aio-darwin-arm64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code...

MAL-2026-14580 Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code...

@ccfly/setup (0.1.0) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.0)

@ccfly/setup-darwin-x64 NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.0 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.8) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.8)

@ccfly/setup-darwin-x64 NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.8 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.1) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.1)

@ccfly/setup-darwin-x64 NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.1 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.9)

@ccfly/setup-darwin-x64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.13)

@ccfly/setup-darwin-x64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...