ForensiX-Studio

ForensiX Studio Forensic Intelligence Platform | Malware Analysis | Threat Correlation Engine 🧠 Multi-Signal Analysis • ⚡ Behavioral Intelligence • 🎯 MITRE Mapping ⚠️ LEGAL DISCLAIMER ForensiX Studio is intended strictly for authorized digital forensics, security research, and defensive analysis. ...

cpanel-malware-cleaner-cve-2026

cPanel malware, CVE-2026-41940, virus removal 🚨 cPanel Malware Cleaner – CVE-2026-41940 Fix Tool A lightweight and powerful security tool to detect, remove, and prevent malware infections caused by recent cPanel vulnerabilities including CVE-2026-41940. 🔥 Features Detects and removes malware,...

certReport

CertReport This tool is intended to reduce the load of effort required to report authenticode certificates. It is intended to take the smallest amount of effort from the reporter, but provide the certificate authority with most the information they need to make a decision. When possible, it is...

FreeMOCA

FreeMOCA: Aprendizaje Continuo sin Memoria para el Análisis de Código Malicioso Enlace al artículo de ArXiv Zahra Asadi, Haeseung Jeon, Sohyun Han, Md Mahmuduzzaman Kamol, Se Eun Oh, Mohammad Saidur Rahman† Autores con igual contribución. †Autor de correspondencia. !NOTE Esta es la implementación...

Malicious code in crypto-validates (npm)

[email protected] ships a dist/index.js identical to [email protected]: validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards freshly generated crypto.randomBytes output to the...

MAL-2026-16087 Malicious code in polygon-toolkits-validator (npm)

[email protected] exports Node crypto helper wrappers, but validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check as action: "validator", content: btoainput through checkvalidator in dist/index.js, then returns true without validating...

MAL-2026-16088 Malicious code in pumpswap-sdk-v1 (npm)

[email protected] presents crypto helpers for the PumpSwap SDK, but validateinput base64-encodes its argument and POSTs it to https://pumpswap-sdk.maingoal.xyz/v1/check through checkvalidator in dist/index.js, and randomBytessize forwards the hex output of crypto.randomBytes to the same host...

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...

Malicious code in @versacode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb56d60eb9a1df8a4b6dc87789234366b8431047ca01dbce807af874778ffa8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16068 Malicious code in @versacode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb56d60eb9a1df8a4b6dc87789234366b8431047ca01dbce807af874778ffa8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in i18nexus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37d8dfb4ceaec110414441ebad5da37dad342ef653a20499504385d9db1ffdac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16043 Malicious code in @web2apk/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in op-ts-server-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10907c74bd3094d2b21cc247498cb53b280d3e6bdb6947b86f17bee73b8eec7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

Malicious code in feishu-docx-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7567437816acf6d56f5ef9e5303da39aa1663ac47d547f66552a0482158d19 package.json declares "preinstall": "bun run index.js" and lists bun as a runtime dependency, so npm install fetches the alternate Bun runtime and...

Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

MAL-2026-16038 Malicious code in scw-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92fe2c0fe1acd783b5612c30ba1976c68c421b6451a68d150928e5166c362e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in array-frames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9461945c1bccc858c52f79e13624b33fb8cdfc37c889de48907b8464779063 The npm package [email protected] advertises a trivial array chunking utility but ships an obfuscator.io-wrapped payload as its main module. On...

safe-chain v1.5.16

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...