Malicious code in fa-mcp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb The package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports childprocess, https...

Malicious code in messenger-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e89235ade6dcbf682edae5afb7d789c6a834b2ebe032fac72c796734837d10 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo.username, home directory, DNS servers and...

Malicious code in twilio-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d301e90ede6f86f259e827a1cb61ad0b4b0166b70281bdf7896f726eea31 On npm install, the package's postinstall script executes index.js, which collects host identifiers os.hostname, os.userInfo.username, os.homedir,...

MAL-2026-12800 Malicious code in sc-font-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8c91edd839dd00f2e58ad9296742f8c3c5ff126523bbd8ed7561fef7c8516e The package's preinstall script runs automatically on npm install and collects installer-side identifiers — os.hostname, os.userInfo.username,...

MAL-2026-12319 Malicious code in @kite-js-tools/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc1e1caf8550f3daa91e586dd7b4eab7f5ec8f62acc12dce63d9d60c293e7c9 package.json declares preinstall and postinstall lifecycle scripts that fire automatically on npm install. The preinstall hook performs an HTTPS GET ...

MAL-2026-12482 Malicious code in tool-registry-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b635b8b6d257c079a0d0a9c06e37910b67f2e75d1e71dced264043624951ce06 package.json declares a preinstall hook that runs index.js on npm install. index.js collects host identifiers os.hostname, os.userInfo, homedir, DNS...

Malicious code in matlab-azure-devops-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...

Malicious code in github-app-sts-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9434f2e4ac17da4d2b9dff0c36ed8b3c5cc3f76882b9898b768e78ba982bbac2 The package declares a preinstall lifecycle hook that runs index.js on npm install. index.js collects host identifiers and system files os.hostname,...

MAL-2026-12389 Malicious code in github-app-sts-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9434f2e4ac17da4d2b9dff0c36ed8b3c5cc3f76882b9898b768e78ba982bbac2 The package declares a preinstall lifecycle hook that runs index.js on npm install. index.js collects host identifiers and system files os.hostname,...

Malicious code in ccxt-trading (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0442271e1969ce5899ac9176cf8dfed0dbf8edd46fecf99ee8e3cd4f21a92d8 Package name resembles the popular ccxt library. The exported ProExchange constructor, invoked whenever a consumer instantiates any exchange through...

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection...

MAL-2026-12135 Malicious code in accounts-offers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8f0ec540c47830dcdf624b91e67aa00b005c240e43bb7cd5ffd183f02beac7 The package advertises itself as an 'Accounts offers library' but on require index.js silently loads setup.js, which via process.nextTick collects...

MAL-2026-12197 Malicious code in simple-date-formatter-new-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbd38bc87a61131881784bb9e919a03a4cfa2f69934fd17e3735b34ce75e3f6 package.json declares a postinstall script that runs a shell pipeline collecting host identifiers uname, id, routing and ARP tables, TCP-probe result...

Malicious code in simple-date-formatter-new-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbd38bc87a61131881784bb9e919a03a4cfa2f69934fd17e3735b34ce75e3f6 package.json declares a postinstall script that runs a shell pipeline collecting host identifiers uname, id, routing and ARP tables, TCP-probe result...

cvelistV5 cve_2026-08-05_0000Z

Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...

Missing permission check in violation-comments-to-gitlab allows enumerating credentials IDs

violation-comments-to-gitlab 2.62.0 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using anothe...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0813

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0813. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-63822

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...

Debian dla-4720 : ata-modules-6.1.0-48-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4720 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4720-1 [email protected]...

Photon OS 5.0: Openjdk17 PHSA-2023-5.0-91-0028

An update of the openjdk17 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0028. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...