Vulnhalla

Vulnhalla 자동화된 CodeQL 분석 및 LLM 분류 Vulnhalla의 연구 배경 및 동기에 대한 자세한 개요는 공식 CyberArk 위협 연구 블로그 게시물을 참조하십시오: Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhalla는 전체 보안 분석 파이프라인을 자동화합니다: 1. GitHub에서 특정 프로그래밍 언어의 레포지토리를 가져오기 2. 해당 CodeQL 데이터베이스를 다운로드 가능한 경우 3. 보안 또는 코드 품질 문제를...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 exploit 출처: https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

PolinRider

PolinRider: DPRK 위협 행위자가 수백 개의 GitHub 리포지토리에 멀웨어를 주입 날짜: 2026-03-07 최종 업데이트: 2026-04-11 — 아래 4월 1011일 업데이트 참조 심각도: 위급 — 1,950개 이상의 공개 리포지토리에 걸친 활성 공급망 감염, TasksJacker / Contagious Interview 클러스터와의 운영상 합병 확인됨 OpenSourceMalware 팀은 GitHub 사용자 및 조직의 리포지토리에 멀웨어를 주입하는 대규모 위협 캠페인을 발견했습니다. 위협 행위자...

gitrob

Gitrob: Использование открытого исходного кода в OSINT Gitrob — это инструмент для поиска потенциально конфиденциальных файлов, отправленных в публичные репозитории на Github. Gitrob клонирует репозитории, принадлежащие пользователю или организации, на заданную глубину, проходит по истории коммит...

PoC_CVEs

PoC CVEs — 개념 증명 저장소 인덱스 CVE 식별자에 매핑된 공개 GitHub 개념 증명 저장소의 지속적으로 업데이트되는 인덱스입니다. 교육 및 방어적 보안 연구 목적으로만 사용하세요. 실시간 검색 인터페이스 labs.jamessawyer.co.uk/cves/ 전체 인덱스에서 검색 가능한 웹 인터페이스입니다. 정확한 CVE ID 또는 저장소 조각으로 몇 초 만에 PoC 저장소를 찾을 수 있습니다. 이 저장소의 목적 이 저장소는 GitHub 및 유사 소스에서 공개적으로 이용 가능한 개념 증명 익스플로잇 코드 및 취약점 데...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets 소개 git-all-secrets는 다음과 같은 작업을 수행할 수 있는 도구입니다: 조직의 여러 공개/비공개 GitHub 저장소를 복제하고 스캔합니다. 조직에 속한 사용자의 여러 공개/비공개 GitHub 저장소를 복제하고 스캔합니다. 조직의 단일 공개/비공개 저장소를 복제하고 스캔합니다. 사용자의 단일 공개/비공개 저장소를 복제하고 스캔합니다. 사용자의 단일 공개/비밀 Gist를 복제하고 스캔합니다. 조직 내 팀의 저장소를 복제하고 스캔합니다. 위의 모든 작업을 한 번에 수행합니다!! 오 예! 조직...

CVE-2026-56443

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...

Malicious code in @workbench-stack/core (npm)

npm/@workbench-stack/core is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

Malicious code in @nebula.js/sn-layout-container (npm)

npm/@nebula.js/sn-layout-container is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @qlik/sprout-icons (npm)

npm/@qlik/sprout-icons is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Malicious code in qlik-object-conversion (npm)

npm/qlik-object-conversion is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11984 Malicious code in qlik-object-conversion (npm)

npm/qlik-object-conversion is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @nebula.js/sn-listbox (npm)

npm/@nebula.js/sn-listbox is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

Malicious code in qlik-chart-modules (npm)

npm/qlik-chart-modules is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-11806 Malicious code in @qlik/sprout-gesture (npm)

npm/@qlik/sprout-gesture is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11625 Malicious code in @onereach/regular-expressions-test (npm)

npm/@onereach/regular-expressions-test is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

Malicious code in @nebula.js/sn-nav-menu (npm)

npm/@nebula.js/sn-nav-menu is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/cp-ui (npm)

npm/@servicetitan/cp-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

MAL-2026-11904 Malicious code in @servicetitan/microfront-utils (npm)

npm/@servicetitan/microfront-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...