CVE-2018-6574

CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...

Malicious code in claudeopuseni (PyPI)

Source: kam193 355cfc006ca4cb062c248bf2108be828c6164ae20d12ee5c7794ab68ee351843 During installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds an obfuscated infostealer which collects sensitive data a...

Malicious code in claudeopusenifile (PyPI)

Source: kam193 051daf7dfb8c28210996afbf561646b38781f563483e6c2e7471add0a6021885 During installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds an obfuscated infostealer which collects sensitive data a...

Malicious code in claudeopusfile (PyPI)

Source: kam193 9a776d104d66cbeec1283bd7a7e9decc15da19a1946dd27c7d7ca632a6cdc2f2 During installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds an obfuscated infostealer which collects sensitive data a...

Malicious code in claudeopuseni (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715421a3b919f086db6ad4a57d6c8d6d333b019e3a63e607be95cf3fcb7aef5d On import, claudeopuseni/init.py invokes boot.check, which issues an HTTPS GET to https://thisisafalsepositive.st/cdn/v2/claudeopuseni/manifest.json,...

MAL-2026-18299 Malicious code in claudeopuseni (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715421a3b919f086db6ad4a57d6c8d6d333b019e3a63e607be95cf3fcb7aef5d On import, claudeopuseni/init.py invokes boot.check, which issues an HTTPS GET to https://thisisafalsepositive.st/cdn/v2/claudeopuseni/manifest.json,...

Malicious code in claudeopusenifile (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 051daf7dfb8c28210996afbf561646b38781f563483e6c2e7471add0a6021885 During installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds...

MAL-2026-18300 Malicious code in claudeopusenifile (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 051daf7dfb8c28210996afbf561646b38781f563483e6c2e7471add0a6021885 During installation, obfuscated code is used to fetch code hidden in an image containing a Python application with a native extension module. This module holds...

MAL-2026-18298 Malicious code in claudeopusfile (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2f0d45d8a2c0489d082d86a91c63fc5cad53f891b3dd1e976cd7479344c65f setup.py imports claudeopusfile.compat.ensurecompat during pip install. compat.py constructs the string 'exec' from a chr-code tuple...

Malicious code in claudeopusfile (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2f0d45d8a2c0489d082d86a91c63fc5cad53f891b3dd1e976cd7479344c65f setup.py imports claudeopusfile.compat.ensurecompat during pip install. compat.py constructs the string 'exec' from a chr-code tuple...

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

Malicious code in erc20-approve-audit (RubyGems)

Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked, detached, session-leader background process setsid, /dev/nul...

Malicious code in multichain-rpc (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5765482ebcff5ac393edb3ce06164e7c697a00aa7e32c92b1272dc20184b424 The gem's extconf.rb, executed automatically by gem install as a native-extension build step, base64-decodes a Ruby payload and runs it via eval insi...

Malicious code in erc20-approve-audit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked,...

MAL-2026-17785 Malicious code in erc20-approve-audit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked,...

MAL-2026-17780 Malicious code in block-explorer-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cfaa3470065369addbb91e3a6c2072e8add334c4d27bff95f91315aa58ae313 The gem's native-extension build script extconf.rb decodes a base64-encoded Ruby payload and passes it to eval inside a double-forked, detached child...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

Malicious code in cryoto-toolbox (RubyGems)

Source: amazon-inspector 3fcf75a196193219b146e937b6d9a7cf8937df152658a2d7b7b8905605c9f8a6 The gem declares ext/cryoto-toolbox/extconf.rb as a native extension, which rubygems executes during gem install. Before the single createmakefile call, the script evaluates a base64 blob that XOR-decodes a...

Malicious code in hdkey-derive-helper (RubyGems)

Source: amazon-inspector 04f5409730ece37713b6a8d3afddcce30744e213b80759f7ae89478731b0264a The gem presents itself as a BIP32/mnemonic derivation helper but ships only a wordlist stub and a 56-byte empty C file ext/hdkey-derive-helper/hdkey-derive-helper.c, body void InitHdkeyDeriveHelpervoid...

Malicious code in throttle-requests (RubyGems)

Source: amazon-inspector ff1a325fc41cbb1dd7c949031e75946ce0f5f522bae7f63371dcc2c93589ec5d The gem's native-extension build script extconf.rb base64-decodes an embedded Ruby payload, writes it to a random path in the temporary directory, and spawns it in the background before running the normal mk...