329997 matches found
MAL-2026-17907 Malicious code in @beloved-lenora/opencode-shell-guard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8dd8daa41992a2f1dec185b6924f6cc81b7172b55cccd6930f062317984ba8 The package presents itself as a safety guard that reviews shell commands before execution, but contains an undocumented branch that activates when t...
Malicious code in @flexmr/survey-conversation (npm)
Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL https://artifacts.creditslib.com/npm/cache-format-syntax-tracer rather than a registry version range. On npm install,...
Malicious code in @flexmr/survey-client (npm)
Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to https://artifacts.creditslib.com/npm/marker-index-symbol-schema instead of a registry version...
MAL-2026-17899 Malicious code in @flexmr/survey-conversation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL...
MAL-2026-17898 Malicious code in @flexmr/survey-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to...
Debinject
Debinject Inject malicious code into .debs MAINTAINERS Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec VIDEO DEMO CLONE git clone https://github.com/UndeadSec/Debinject.git RUNNING cd Debinject python debinject.py PREREQUISITES python 2.x dpkg dpkg-deb metasploit DISCLAIMER TO BE USED FO...
MAL-2026-17892 Malicious code in xmd-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a85f0f80af9a736d2f4a26eb74220eeaa0f7deb07ff911a822221a980f78df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17890 Malicious code in @developmentyora/yorakids (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d16bc35a010f7219764c00ca6703b36997bf3ccdf410b7e4cd71d043009938f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17439 Malicious code in @developmentyora/baileyss (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17891 Malicious code in asistenyorstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159e4bc42ce900113481aa39dc41ea3c2bfe29a74a1cbb383cc80323dad13858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17438 Malicious code in @celestial-community/baileys (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
CVE-2024-38526
CVE-2024-38526 - Polyfill Scanner: x Mass Urls Scanner The polyfill.io CDN, previously compromised to serve malicious code, has now been secured with the latest fix in pdoc 14.5.1. Overview Detect potential issues Automate repetitive tasks with ease Features High Confidence Alerts : Detects scrip...
EUVD-2025-30320
Rejected reason: Not used...
EUVD-2025-30316
Rejected reason: Not used...
EUVD-2025-30318
Rejected reason: Not used...
EUVD-2025-30314
Rejected reason: Not used...
EUVD-2024-55021
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-30319
Rejected reason: Not used...