Malware in @pkgship/frps-linux-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18199 Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2c1a511013dd65df6260ab26fef946005adb17532ab20070c95e1d5157608c Package appears to distribute a platform-specific binary frps linux-amd64 under a scoped npm name. Only two files were present in scope and no...

Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2c1a511013dd65df6260ab26fef946005adb17532ab20070c95e1d5157608c Package appears to distribute a platform-specific binary frps linux-amd64 under a scoped npm name. Only two files were present in scope and no...

Malicious Package

Overview @pkgship/frps-linux-amd64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2026-110619

frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...

PT-2026-114061

frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...

FRPS Dashboard - Detect

FRPS Dashboard panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FRPS Dashboard panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FRPS Dashboard - Detect', 'description': 'FRPS...

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

Summary An integer-overflow vulnerability in the frp server's optional SSH Tunnel Gateway lets any unauthenticated remote attacker crash the entire frps process with a single five-byte message. When the gateway parses an SSH exec channel request in pkg/ssh/server.go, it adds a small constant to a...