tanstack-shield

🛡️ tanstack-shield 一键式供应链攻击扫描器，针对 CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx 检测在2026年5月11日危害了42个@tanstack/ npm包（84个恶意版本）的"Mini Shai-Hulud"蠕虫。 一行命令——扫描你的项目 curl -fsSL https://raw.githubusercontent.com/Caixa-git/tanstack-shield/main/tanstack-shield.sh | bash 扫描指定目录 curl -fsSL...

np-audit

np-audit — npm 包审计工具 针对 npm 包的静态安全分析——在执行前 检测混淆的生命周期脚本、已知漏洞和恶意模式。可作为 npm install 和 npm ci 的即插即用替代品。 零依赖。 仅使用纯 Node.js 内置模块。体积 100 kB。 npx np-audit scan express npm install -g np-audit npa scan 扫描所有依赖 npa install 审计并安装 alias npm='npa' 作为即插即用替代品使用 检测器（Marshallers）...

pkgxray

pkgxray — seguridad previa a la instalación para paquetes npm, servidores MCP y agentes de IA Inspecciona un paquete npm o un servidor MCP antes de instalarlo o conectarte a él, y obtén un veredicto determinista respaldado por evidencia: SAFE, REVIEW o BLOCK. Análisis estático local y sin...

tanstack-compromise-checker

tanstack-compromise-checker ⚠️ Aviso legal: Esta herramienta fue creada para mi propio caso de uso. Todos los indicadores se derivan de las siguientes fuentes de avisos de seguridad: GHSA-g7cv-rxg3-hmpx Snyk: Paquetes npm de TanStack comprometidos StepSecurity: Análisis en profundidad de Mini...

scan-shai-hulud

scan-shai-hulud Un escáner Bash rápido y sin dependencias para detectar si tu máquina está afectada por el ataque a la cadena de suministro CVE-2026-45321 "Mini Shai-Hulud". El 11 de mayo de 2026, más de 170 paquetes npm y 2 paquetes PyPI de TanStack, Mistral AI, UiPath, OpenSearch y Guardrails A...

tanscript-exploit-check

Mini Shai-Hulud Ataque a la Cadena de Suministro — Comprobador de IOCs curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash O clonar y ejecutar localmente: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd...

pmg

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

scavenger_scanner

CVE-2025-54313 IOC Scanner Escáneres multiplataforma para detectar Indicadores de Compromiso IOCs relacionados con el ataque a la cadena de suministro de eslint-config-prettier CVE-2025-54313. El 18 de julio de 2025, varios paquetes npm populares fueron comprometidos mediante un ataque de phishin...

Kothamine malware uses Tailscale’s tailcat to evade network detection

We discovered an undocumented remote-access Trojan RAT called Kothamine Agent. It supports more than 30 commands and it gives attackers control of an infected Windows computer: they can run commands, read and change files, and add new capabilities. Some versions can also steal browser data and...

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: code-server, npm, prism, saf, renovate, pulumi, opensearch-dashboards, lerna, node-gyp, kubeflow-centraldashboard, sqlpad...

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence AI-powered Linux implant dubbed RedC2 4.0. "When the module loads, it locates the bundled binary,...

CLSA-2026-1786791608 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 15.2.2-tuxcare.3...

CLSA-2026-1786739230 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 20 @angular packages to address 2 CVEs. Fixed in 8.0.3-tuxcare.6...

@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...

@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1432 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)

pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.1.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.0.0-beta-20260819155526, =0.0.0-beta-20260820202238, =0.0.0-beta-20260819155526, =0.1.0, =0.1.1 and more Source cves:...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.29), @142vip/vuepress (0.0.1-alpha.19) +211 more potentially affected by CVE-2026-71438 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.15.0, =0.35.0, =0.2.0, =1.0.1 and more Source cves: CVE-2026-71438 Source advisory: OSV:GHSA-C4C3-PG64-4M4V...

@appweaver/core (>=1.1.6, <=1.4.1), @cappa/cli (>=0.11.1, <=0.12.0) +33 more potentially affected by CVE-2026-18427 via @fastify/static (>=10.1.0, <=10.1.2)

@fastify/static NPM version =10.1.0, =1.1.6, =0.11.1, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =7.0.0-canary.3011, =0.0.4, =0.0.6 - @darthcav/ts-http-server 0.9.1 -...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +23 more potentially affected by CVE-2026-71321 via nuxt (>=4.0.0-rc.0, <=4.5.0)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =1.6.0-rc.3, =0.4.5, =0.0.0, =1.1.0, =2.0.1 - @uxfront/layer-app 0.1.0 - @zach-mac/zachscommoncomponents 1.0.4 and more Source cves: CVE-2026-71321 Source advisory: OSV:GHSA-9PGF-384G-P7MV...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +77 more potentially affected by CVE-2026-71321 via nuxt (>=3.1.2, <=3.21.8)

nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71321 Source advisory: OSV:GHSA-9PGF-384G-P7MV...