Malicious code in frequent-brown-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bc862f471be0f0adac1f9794571c1226e1eba73e7e186a030d1423e4c0b43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55271

Malicious code in comprehensive-cyan-elk npm...

Malicious code in immense-brown-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d0bfeba4125eb4c3e9e3ebd23385bc527e264cde1bc42a0b95447f427300bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51144

Malicious code in voluntary-silver-elk npm...

EUVD-2025-59116

Malicious code in invisibleelkz3n npm...

EUVD-2025-49796

Malicious code in mixedelkz3n npm...

EUVD-2025-49069

Malicious code in vividelkz3n npm...

EUVD-2025-49947

Malicious code in judicialelkz3n npm...

EUVD-2025-50730

Malicious code in aggregateelkz3n npm...

EUVD-2025-45172

Malicious code in supposedelkz3n npm...

EUVD-2014-6840

Malware in sbrugna...

MAL-2025-9973 Malicious code in @zalastax/nolb-_elk (npm)

The package @zalastax/nolb-elk was found to contain malicious code...

Malicious code in @zalastax/nolb-_elk (npm)

The package @zalastax/nolb-elk was found to contain malicious code...

MAL-2024-1330 Malicious code in elk-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...

Malicious code in elk-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, prometheus-elasticsearch-exporter-fips, gke-gcloud-auth-plugin, prometheus-node-exporter, terraform, flux-source-controller, aws-load-balancer-controller, nodetaint, trust-manager, k8sgpt-operator, atlantis-fips,...

This Week in Spring - July 11th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in yummy, sunny Jakarta, Indonesia at the moment, preparing for a week of meetings and the SpringOne Tour Indonesia event later this week. I'll also be speaking in Kuala Lumpur, Malaysia on July 20th, 2023 . If you're in...

Leaktopus - Keep Your Source Code Under Control

Keep your source code under control. Key Features Plug &Play - one line installation with Docker. Scan various sources containing a set of keywords, e.g. ORGANIZATION-NAME.com. Currently supports: GitHub Repositories Gists coming soon Paste sites e.g., PasteBin coming soon Filter results with a...

MAL-2022-566 Malicious code in @roborox_int/elk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ed457be000bb1802966825eae5aceb4b0d05a18d2e7fee5065b81aa7e2140fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sealighter - Easy ETW Tracing for Security Research

I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without needing to know format Robust Event filtering including...