52 matches found
MAL-2026-4715 Malicious code in weavedb-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f22636b5e4726978e23b10a4311fb7e65c2b10003da72429348fa617884d1 package.json declares "preinstall": "./vendor/setup", which runs a 976KB packed Linux x86 ELF binary sha256...
Malicious code in weavedb-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f22636b5e4726978e23b10a4311fb7e65c2b10003da72429348fa617884d1 package.json declares "preinstall": "./vendor/setup", which runs a 976KB packed Linux x86 ELF binary sha256...
Malicious code in weavedb-node-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d174728fc7469b023ece1980797185c35abd74c56e253bc1dc1b295a46a1dbd2 package.json declares "preinstall": "./tools/setup", unconditionally executing a 976KB UPX-packed, stripped Linux x86 ELF on every npm install. The...
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. "Although the affected packages were all Composer packages, the malicious code was not added to composer.json,"...
Malicious code in crypto-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2e9ca362c982e5c75ed96c626b87ca91d85fb6cb52c89c7a8def86851017b8 Package name typosquats the widely-used crypto-js library and mirrors its API surface, README, and repository references to appear legitimate...
PT-2026-35239
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description A code injection issue exists in the Policies component's ToolGuard integration that bypasses the allow custom components=false security control. The validation mechanism only checks t...
F5 WAF For NGINX Installed (Linux)
Binary data f5waffornginxnixinstalled.nbin...
EUVD-2000-0744
Malware in sbrugna...
enumy
Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...
IBM MQIPT Redistributable Installed (Linux)
Binary data ibmmqiptportablenixinstalled.nbin...
Zabbix Proxy Installed (Linux)
Binary data zabbixproxynixinstalled.nbin...
Containerd Installed (Linux)
Binary data containerdinstalled.nbin...
CRI-O Installed (Linux)
Binary data cri-odetect.nbin...
MongoDB Shell Installed (Linux)
Binary data mongodbshelllinuxinstalled.nbin...
GoodAccess Installed (Linux)
Binary data goodaccessnixinstalled.nbin...
Podman Installed (Linux)
Binary data podmandetect.nbin...
Ollama Installed (Linux)
Binary data ollamanixinstalled.nbin...
OpenVPN Installed (Linux)
Binary data openvpnnixinstalled.nbin...