MAL-2026-14976 Malicious code in 3layerdipstackwudpnc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc4a9473451d1aa67c931cf613fea7d1d733fee91bc3858a9ff6de651c4ace The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack5dfkei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b3c3d64b475cec5c69322b31b3e3bd9cba689f87cb9f878acde15f8dc7e8e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack9gdxi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3f122cca9a4975d91aefb7515d935f02e2e69115a54f9576be92972272f656 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackryyay3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873039b8de9adf03f5e9bca4a4d16a82152226c59aaab549d11a578d084b5d57 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfourm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6201726f590de9fa96f0aebe76a0fe1ad67a6ee5466a62a3eb5933f7655be1f4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14885 Malicious code in 3layerdipstackq4ek0f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d889748f378b114bb74220ed9ecf1dfbf2548c5126539fe997b409e201c4b23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14674 Malicious code in 3layerdipstack9gdxi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3f122cca9a4975d91aefb7515d935f02e2e69115a54f9576be92972272f656 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in cacao1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403a43aab3b982d17c5c01d7df45149d796e7185f4137bf4a92675351a1b50e8 The package has no advertised functionality empty description, self-referential dependency on its own name at ^9.9.9. Its package.json declares both...

Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

MAL-2026-14588 Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

CVE-2024-3094_xz_check

Script di verifica CVE-2024-3094 per xz Questo repository contiene uno script Bash e un comando monorighello per verificare se un sistema sta eseguendo una versione vulnerabile dell'utility "xz", come specificato da CVE-2024-3094. Vedi la descrizione e la dichiarazione d'impatto qui sotto dalle...

CVE-2024-3094-checker

CVE-2024-3094-Checker Die XZ-Utils-Versionen 5.6.0 und 5.6.1 scheinen kompromittiert zu sein. XZ Utils ist eine Software zur Datenkomprimierung und kann in Linux-Distributionen enthalten sein. Der schädliche Code könnte unbefugten Zugriff auf betroffene Systeme ermöglichen. Quellen:...

CVE-2025-56383-Proof-of-Concept

O Notepad++ v8.8.3 tem uma vulnerabilidade de sequestro de DLL, que pode substituir o arquivo DLL original para executar código malicioso. O método de exemplo é o seguinte: Observe que a demonstração a seguir usa npp.8.8.3.Installer.x64.exe para instalar o Notepad++ para teste, mas, na realidade,...

CVE-2025-32965-xrpl-js-poc

CVE-2025-32965 — xrpl.js Supply Chain Attack PoC-Bericht Schwachstellenbeschreibung CVE Kodu: CVE-2025-32965 Schwachstellentyp: Supply Chain Attack CWE-506: Embedded Malicious Code Ziel: Versionen 4.2.1–4.2.4 und 2.14.2 der xrpl.js-Bibliothek Auswirkung: Die Seed-/Secret-Daten der Wallet des...

Debinject

Debinject Inietta codice malevolo nei .deb MANTENITORI Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec VIDEO DIMOSTRATIVO CLONAZIONE root@kitploit: git clone https://github.com/UndeadSec/Debinject.git ESECUZIONE root@kitploit: cd Debinject root@kitploit: python debinject.py PREREQUISITI...

Malicious code in @fleetbo/svro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d86373813cd4d2b65edb11f6a3f352ad81a55e7de0444884f66b0adb482e661 The package ships two heavily obfuscated JavaScript files under dist/ — postinstall.cjs and cli.cjs — using hex-mangled identifiers 0x56260b, 0x12d64...

MAL-2026-14586 Malicious code in @fleetbo/svro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d86373813cd4d2b65edb11f6a3f352ad81a55e7de0444884f66b0adb482e661 The package ships two heavily obfuscated JavaScript files under dist/ — postinstall.cjs and cli.cjs — using hex-mangled identifiers 0x56260b, 0x12d64...

Malicious code in @hd-team/app-dnpkg-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5be2650e129e66738602f02b893ba443ffbd9a47df685f76bd4ae84b885529 The tarball contains only package.json and index.js. index.js is not JavaScript source: it is a base64-encoded JSON blob that decodes to a...

MAL-2026-14569 Malicious code in @hd-team/app-dnpkg-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5be2650e129e66738602f02b893ba443ffbd9a47df685f76bd4ae84b885529 The tarball contains only package.json and index.js. index.js is not JavaScript source: it is a base64-encoded JSON blob that decodes to a...

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc ist Malware / Protestware Das Modul RIAEvangelist/node-ipc enthält Protestware peacenotwar. Auszug aus RIAEvangelist/node-ipc: ab v11.0.0 & v9.2.2 verwendet dieses Modul das peacenotwar-Modul. Noch wichtiger: Die Commits 847047cf7f81ab08352038b2204f0e76334495...