Malicious code in tinkoff-boxy-gitlab-labels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995279b7bea8c6d826ee620cb5a31dc38662a1ba4d4b07bda9fc941908daa1e3 On require of the package, index.js loads runtime.js which selects a platform-specific payload path, fetches an opaque native binary from...

Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352e7120bec31271d79af9befe17a46024f5785ffca010335fa13eb40c946e3a On require of the package, index.js loads init.js which reconstructs attacker-controlled hostnames via array-join string obfuscation four...

MAL-2026-12279 Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352e7120bec31271d79af9befe17a46024f5785ffca010335fa13eb40c946e3a On require of the package, index.js loads init.js which reconstructs attacker-controlled hostnames via array-join string obfuscation four...

MAL-2026-12267 Malicious code in tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cb27375f9846c6aeba581e7e7ec6112eefd54f8d743638a1e803bde3d46616 On require of the package's main index.js, loader.js selects a platform-specific endpoint and fetches an opaque native binary over HTTPS from a...

MAL-2026-12230 Malicious code in tinkoff-boxy-desktop-two-panel-right-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a347918d0341f95fdb00b2e148c6709be7d7126be5f629ce9515d2349624246 On require of this package, index.js loads vendor.js which detects the host OS/arch, assembles destination hostnames from split string fragments...

Malicious code in tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801b453825e385d0c0c659b2037a6f8fcbcdfa0c0ae519ae103280639cd8ed99 Package name mimics a Tinkoff internal namespace and ships a loader that runs on require. index.js requires./init on load; init.js selects a...

Malicious code in tinkoff-statist-browser-typed-client-test.softwarecenter.metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9027d7179ebd421765074cbde727f3a3e358eb677a9a9125fb22ff6638fd799 The package's index.js requires./setup on module load. setup.js selects a platform-specific output path /var/tmp/.cache on unix, %TEMP%/dotnetdiag.ex...

Malicious code in tinkoff-component-page-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6470a0a8983b764a0df6ac4b4f5945f0941e724877192033dace84d55b65fab On require of the package, index.js loads platform.js which unconditionally invokes a setup routine that downloads a platform-specific binary from...

Malicious code in peter-desktop-peter-big-column (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7593cd2f0f03765e6debc06626ee5d771a32e0d7eb579ddca1bfc5ca53bc22e6 On require, index.js loads runtime.js which assembles download hostnames at runtime from split string fragments resolving to...

Malicious code in tinkoff-boxy-form-desktop-sme-registration-ooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd92a77dddf46c2afa43b4db0127eea04dfde2afa2ba45e7c43965c06249997e Package name typosquats Tinkoff's official SME registration form. On require of the package, index.js loads ext.js, which reconstructs...

MAL-2026-12161 Malicious code in bigops-communication-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c94eee2da1d74fc50236452fc79165eb1183ce0bb874a62a9a7985b6e77206 On require of the package, index.js loads platform.js which invokes init at module top level. init downloads an opaque binary from Cloudflare Workers...

Malicious code in bigops-auth-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018aa5e99b7e6aa9f438b51ee00164801a2eb1c52e78ad123d0c490dced4b67c On require of [email protected], index.js loads vendor.js which selects a platform-specific binary URL, downloads bytes over HTTPS from...

MAL-2026-12151 Malicious code in bigops-auth-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018aa5e99b7e6aa9f438b51ee00164801a2eb1c52e78ad123d0c490dced4b67c On require of [email protected], index.js loads vendor.js which selects a platform-specific binary URL, downloads bytes over HTTPS from...

MAL-2026-12165 Malicious code in bigops-external-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16bd7f21dc6d78b406fc39906d8cbb621072c638f84593871016f3b5ba5bae5 On require'bigops-external-auth', index.js loads adapter.js which downloads a platform-specific native binary from Cloudflare Worker hosts whose...

MAL-2026-12154 Malicious code in bigops-call-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ad22f3108b03b9f6e2e6ec2a7582e185694e93a6b84ee815182a224202754c The package's index.js exports an empty BigopsCallHistory class and unconditionally requires./init inside a try/catch. On any require or import,...

Malicious code in bigops-info-notices (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729d2cb33896f2398098de3285076599a473dfad68fa61e94a65f3f4453f3240 On require of the package, index.js side-loads bootstrap.js inside a try/catch. bootstrap.js selects a platform-specific endpoint, fetches an opaque...

MAL-2026-12158 Malicious code in bigops-chats-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb764a83c5f69d414a640397df2acd34a25e83c8829a63040046661fd4e33a69 On require of the package, index.js loads init.js which performs OS/arch detection, downloads a native binary from hardcoded Cloudflare Workers...

CVE-2026-55996

A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured,...

CVE-2026-55996

CVE-2026-55996 affects Rancher components ( Rancher server and cattle-cluster-agent ) that use the dynamiclistener TLS library. Without an effective CN filter, dynamiclistener appends every SNI hostname to the serving certificate’s SANs. An unauthenticated attacker with network access can send ma...

CVE-2026-55996

A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured,...