Malicious Package

Overview ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

Malicious Package

Overview down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection betwe...

Malicious Package

Overview ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview down-load-available-zip-now-265533-the-safeway-elhem-xoyofv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

Malicious Package

Overview avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

Malicious Package

Overview down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between th...

Malicious Package

Overview avail-able-albu-m-down-load-almanac-tdedm-bajrnj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection betwe...

Malicious Package

Overview ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

PT-2026-117223

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load word2vec as vocab tensor of the file hanlp/utils/torch util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely...

PT-2026-117464

Name of the Vulnerable Software and Affected Versions docTR versions prior to 1.1.1 Description An unsafe deserialization issue exists in the load pretrained params function. The function uses torch.load to load checkpoints without setting the weights only=True parameter. This allows an attacker...

PT-2026-117393

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

CVE-2026-111883: Cross-Site Request Forgery (CSRF)

Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swar...

UBUNTU-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

DEBIAN-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

Locust cross-site request forgeing vulnerability

Locust 2.46.7 and earlier versions have a cross-site request forgeing vulnerability. This vulnerability is due to a susceptibility to cross-site request forgery attacks. Attackers can trigger cross-site GET requests for /stop and/stats/reset by inducing operators to access malicious pages, thereb...

CVE-2026-98647 bpf: Fix divide-by-zero in btf_struct_walk()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...