Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

CVE-2026-54051

creationtimestamp| type| source ---|---|--- 2026-06-02 20:40:48+00:00| published-proof-of-concept| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-qw6v-5fcf-5666 2026-07-20 17:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3tqdty562a 2026-07-20...

GHSA-29H4-R29X-HCHV vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-Q94G-3GCF-66X7 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-M976-87WM-48FM vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-897W-FCG9-F6XJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

CVE-2026-52878

creationtimestamp| type| source ---|---|--- 2026-06-02 10:34:12+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-rm5c-5x2p-48wr 2026-08-08 00:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrbwd7al2w...

CVE-2026-52880

creationtimestamp| type| source ---|---|--- 2026-06-02 10:32:57+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-w4c6-7r69-w7j9 2026-08-08 00:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrdieu5f2m...

CVE-2026-52879

creationtimestamp| type| source ---|---|--- 2026-06-02 10:32:40+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-hf2g-6j7h-98wg 2026-08-08 00:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrc5bbpc2b...

CVE-2026-47249

creationtimestamp| type| source ---|---|--- 2026-06-02 10:30:29+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-w342-mj6g-v9c4 2026-08-08 00:03:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrdw2woo2y...

GHSA-HPFW-MQM3-33JH vulnerabilities

Vulnerabilities for packages: uutils...

GO-2026-4960 Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server

Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server...

CVE-2026-8206

creationtimestamp| type| source ---|---|--- 2026-06-01 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86883 2026-06-01 23:00:14+00:00| seen| Telegram/WmCsGmCxw3llm8l2PpPL4TbSd7NmUffJbXR2OZgq87qhTE 2026-06-02 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnbr4mqu6h2j...

GHSA-35JP-WW65-95WH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, gitlab-rails-ce, langfuse, unleash, wazuh-dashboard-fips, lerna, wazuh-dashboard, nextcloud-server, opensearch-dashboards-fips, gitlab-rails-ce-fips, jitsucom-jitsu, awx, kubeflow-katib, prism, langfuse-fips, kibana,...

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma , has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a self-propagating worm. "This is effectively a Mini Shai-Hulud campaign: it uses the same core tactics of...

CVE-2026-45131

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...

CVE-2026-53655

creationtimestamp| type| source ---|---|--- 2026-06-01 16:21:51+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-vmf3-w455-68vh 2026-06-23 12:01:36+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe4oedx62g...

CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...

CVE-2026-45131

CloudPirates Open Source Helm Charts are affected by a vulnerability in the GitHub Actions pull-request.yaml workflow where attacker-controlled code from fork pull requests could run in a privileged context, exposing repository secrets (e.g., Docker Hub credentials/tokens). The issue precedes com...

CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...