Supply-Chain

Software Supply Chain Security A comprehensive three-book series on software supply chain security, covering threats, defenses, and governance. This open-source manuscript provides security professionals, developers, and organizational leaders with practical guidance for securing modern software...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

Malicious code in hijiko-pilaka (PyPI)

Source: kam193 1ca95d97923a23c0fd145b6cc4def7910fa36f1b4c4e5e3cf40e5bab8c9e250d The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in jiklpo-tsunari-kay (PyPI)

Source: kam193 82ef4d01da7de20aa2e477bb07e1daa97855cdf33d186579da5cf148e3d4be0e The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in hijok-lampam (PyPI)

Source: kam193 8944d571e7af6e23f5c6c984859f38e1336fcfeee595dfabca635477cfe38045 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in @securihackbot/depconf-stage-1792484738 (npm)

Source: amazon-inspector d8d8706d2a75c053047537a4f57f754a572a1ca4cec4cde80d00e453878013e1 The package's npm postinstall hook automatically executes on install and transmits installer-identifying data to a hardcoded remote endpoint. It collects os.hostname, the local username, platform/arch, Node...

MAL-2026-18112 Malicious code in hijok-lampam (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8944d571e7af6e23f5c6c984859f38e1336fcfeee595dfabca635477cfe38045 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18113 Malicious code in jiklpo-tsunari-kay (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82ef4d01da7de20aa2e477bb07e1daa97855cdf33d186579da5cf148e3d4be0e The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18111 Malicious code in hijiko-pilaka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ca95d97923a23c0fd145b6cc4def7910fa36f1b4c4e5e3cf40e5bab8c9e250d The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18110 Malicious code in facewareretargeter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d3c954fb5fd6d1ddfc1d5e22129468136fb43fe78c6d69f0df134925b6a8b08 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18105 Malicious code in @securihackbot/depconf-stage-1792484738 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d8706d2a75c053047537a4f57f754a572a1ca4cec4cde80d00e453878013e1 The package's npm postinstall hook automatically executes on install and transmits installer-identifying data to a hardcoded remote endpoint. It...

Malicious code in workcalender (PyPI)

Source: kam193 9a336c0fa7a5b3ee5f036d678c8c0f0d549135a08d05549ee92cb11b1a7f78fa This package contains a stub build-time helper, which in another package of the same uploader was already turned into a backdoor installation. While this package does not yet contain malicious code, it is clear it was...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

DepFuzzer

DepFuzzer DepFuzzer is a tool used to find dependency confusion or project where owner's email can be takeover. Install the tool /!\ This tool requires python = 3.10 /!\ $ python3 -m venv .venv $ source .venv/bin/activate $ pip3 install -r requirements.txt Or you can use the docker image : $ dock...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

Malicious code in @flexmr/survey-conversation (npm)

Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL https://artifacts.creditslib.com/npm/cache-format-syntax-tracer rather than a registry version range. On npm install,...

Malicious code in @flexmr/survey-client (npm)

Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to https://artifacts.creditslib.com/npm/marker-index-symbol-schema instead of a registry version...

MAL-2026-17899 Malicious code in @flexmr/survey-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL...

MAL-2026-17898 Malicious code in @flexmr/survey-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to...

Malicious code in util-foriepft (npm)

[email protected] was published to npm on 2026-10-08 17:34 UTC by user regex33-hackerone. It is described as utility helpers but ships no library code: index.js is an empty module. thunderboltRegistry.js runs when the package is loaded, executes host commands through childprocess and sends thei...