MAL-2026-16229 Malicious code in strapi-plugin-conresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d117fca143f7c8f02261755b923b29cae47f8fdcca2f69f169e26a5601b3661a The package declares a postinstall lifecycle hook "postinstall": "node postinstall.js" that executes on every npm install. postinstall.js invokes...

MAL-2026-16230 Malicious code in strapi-plugin-feedmeeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf1e41fb24d24ffe7b55319dda947ae30bfabb9266e38c17e1231cf4492ec5 [email protected] ships a package.json postinstall hook that executes postinstall.js on npm install. The script constructs a bash reverse...

Malicious code in @prime0/pcomatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08299e41eb4feb9e324854bf5cd3386e6e52696b4b11443254374897a1ad3816 index.js and the postinstall lifecycle script contact a hardcoded bare-IP endpoint at http://69.48.229.140:8080 over plain HTTP. On npm install, the...

PT-2026-93601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the s390 vfio-ap component. In the vfio ap mdev set kvm function, the kvm-arch.crypto.pqap hook pointer is assigned before update locks are acquired and...

SSRF vulnerability in bitbucket-push-and-pull-request allows capturing credentials

bitbucket-push-and-pull-request provides a webhook endpoint at /bitbucket-hook/ to receive webhook notifications. When acting on these notifications, bitbucket-push-and-pull-request 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured...

Malicious code in alkajsdfoiwqeusdflkjsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c1a2da5555fcd5b4350c7adf91acc2730d3afe436979553905ab3a28cd5877 Package declares a preinstall hook that runs index.js on npm install. The script collects hostname, username, homedir, DNS servers, cwd, and the full...

MAL-2026-16174 Malicious code in alkajsdfoiwqeusdflkjsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c1a2da5555fcd5b4350c7adf91acc2730d3afe436979553905ab3a28cd5877 Package declares a preinstall hook that runs index.js on npm install. The script collects hostname, username, homedir, DNS servers, cwd, and the full...

MAL-2026-16192 Malicious code in strapi-plugin-weccresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a6e3de6177f265d44cf7317b020dbaed43907a0ed75b05ae0fe4eebaab469 The package's postinstall.js also declared as main executes automatically on npm install and performs bulk host reconnaissance and credential theft...

MAL-2026-16191 Malicious code in strapi-plugin-uicc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393f18bab3c8fe1d9bea2d425d24d385657785e23cc053ac5e2c1c322f75129 postinstall.js is registered as both the npm postinstall hook and the package main. On install it polls os.hostname every 3 seconds and, when the...

MAL-2026-16189 Malicious code in strapi-plugin-sucresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33561abeab9c7a0c81c1b8aac01248b757234008d03e94dfc72817fa3078f17d [email protected] declares a postinstall lifecycle hook node postinstall.js that runs automatically on npm install. The postinstall...

Malicious code in sql-limit-enforcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8126bab8131e5781af023537f7c5fc2456929c104f71312eeddcea358b5659 Package ships no legitimate functionality: package.json declares main=index.js which is absent from the tarball, and the only shipped source is...

MAL-2026-16151 Malicious code in sql-limit-enforcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8126bab8131e5781af023537f7c5fc2456929c104f71312eeddcea358b5659 Package ships no legitimate functionality: package.json declares main=index.js which is absent from the tarball, and the only shipped source is...

Exploit for Code Injection in Gitea

CVE-2026-60004: Gitea Diffpatch API Remote Code Execution...

Malicious code in concierge-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de458111994244a0a590117185f9e345ff27043c129d4ea24fcb3be5f98f67b The package's declared postinstall script executes exfilv2.js at npm install time. That script harvests the full process environment, current working...

CVE-2026-7848

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...

CVE-2026-7848

The Alior Bank "raty" PrestaShop module for commercial partners is vulnerable to SQL Injection in three hook methods (hookActionObjectProductUpdateBefore, hookActionObjectCategoryUpdateBefore, and hookActionObjectCategoryAddAfter). The module inserts the POST parameters alior_product_promotion, a...

CVE-2026-7848 SQL Injection in Alior Bank raty PrestaShop module

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...

Astra Linux – Vulnerability in Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables – The flag for the discard table is updated, with the pending basechain being deleted. The hook for unregistration is deferred to the commit phase. The same applies to hook updates triggered by the table...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from the prenetns exit path, which unregisters the hooks. Then, the NETDEVUNREGISTER event is triggered, which unregisters the hooks again...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Rejected duplicate devices during updates. It is possible for a chain/flowtable update to include duplicate devices within the same batch. Unfortunately, the netdev event path only removes the first device...