MAL-2026-27 Malicious code in qdatainstaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4ee574ced05e27b63477cb84af816e02ae259c67246f4f31ff63819e7e1048e Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has...

Malicious code in orchestration-node-common-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35f5a5c8b3e75118553234caeef3ebb1eb546d8a678904707d18ef47a16ab9b The package orchestration-node-common-errors was found to contain malicious code. Source: ghsa-malware...

MAL-2026-26 Malicious code in pdatainstaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 671a0098c14338197a26cb64b7f5c35c0e741f3151313fff784bc7a4862ad579 Package is designed to download and execute a remote script, but the script itself seems to be broken missing or wrong URLs. It's most probably a test before...

Malicious code in pdatainstaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 671a0098c14338197a26cb64b7f5c35c0e741f3151313fff784bc7a4862ad579 Package is designed to download and execute a remote script, but the script itself seems to be broken missing or wrong URLs. It's most probably a test before...

CVE-2025-11837

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837 Malware Remover

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837 Malware Remover

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837

CVE-2025-11837 affects Malware Remover and is due to an improper control of generation of code vulnerability. Public sources describe remote exploitation (attack vector: NETWORK) with no user interaction, enabling attackers to bypass protection mechanisms and impact confidentiality, integrity, an...

Malicious code in gatr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5d3d1723e01bd7a4d33591053ec24cde4369a19677874b25a7d73dfa4dadf46e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

QNAP Systems Malware Remover 代码注入漏洞

QNAP Systems Malware Remover is a built-in security application from Taiwan, China-based QNAP Systems. A code injection vulnerability exists in QNAP Systems Malware Remover, which stems from improper code generation controls that could lead to a bypass of protection mechanisms...

Malicious code in ziphash (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e9a36a54bad10e0f086740a84fd0a837dd4bf1cc9c3c0707648af4bb3855a03e During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

MAL-2026-6 Malicious code in ziphash (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e9a36a54bad10e0f086740a84fd0a837dd4bf1cc9c3c0707648af4bb3855a03e During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories

The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defenders anything, it's that threat actors don't pause for holidays or resolutions. They just evolve faster. This week's round-up shows how subt...

eopkg 安全漏洞

eopkg is an open source package manager from GetSolus. A security vulnerability exists in eopkg versions prior to 4.4.0, which stems from the possibility that a malware package may contain files that are not tracked by eopkg, resulting in the relevant tools being unable to display these files...

eopkg 安全漏洞

eopkg is an open source package manager from GetSolus. A security vulnerability exists in eopkg versions prior to 4.4.0, which stems from the possibility that a malware package could escape the directory set by --destdir, causing files to be installed to other locations on the host...

CVE-2025-67703

There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser...

MAL-2025-193010 Malicious code in pyrogrqm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 02c3334952bcf80c0523b20a24f0b744463a944a4f3d18dc45a3f3c1bd00c1eb The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

@vietmoney/react-native-smart-gallery (1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (1.1.2)

@vietmoney/react-native-smart-page NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery 1.2.2 Source cves: unknown CVE Source advisory:...

Malicious code in @vietmoney/react-native-vnpay-merchant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7aa9187bf0ea16a7e5209406b93cd1b253b087a17bac46ad5cf79b8fa317f3 The package @vietmoney/react-native-vnpay-merchant was found to contain malicious code. Source: ghsa-malware...