CVE-2026-112947 Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`

Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Requests containing the ?vite-wasm-instance query are handled by the internal...

Linux Distros Unpatched Vulnerability : CVE-2026-98647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a...

PT-2026-118429

Name of the Vulnerable Software and Affected Versions Vite versions 8.2.0 through 8.2.3 Vite version 8.3.3 Description A flaw in the internal Wasm plugin's load hook allows the first 4 bytes of files located outside the server.fs setting to be returned to the browser. This occurs when a request...

Malware in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in avail-able-albu-m-down-load-almanac-tdedm-bajrnj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-111883

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

EUVD-2026-104320

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

Malicious Package

Overview avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

Malicious Package

Overview down-load-available-zip-now-265533-the-safeway-elhem-xoyofv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...