Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

MAL-2026-14019 Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

MAL-2026-13732 Malicious code in joule-btp-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91439e7a69d936aa8a65b16561f48e9d9abab26fc8e3af4087da8d367cfd2210 On pip install, setup.py runs a collectandexfiltrate routine that reads /private/etc/passwd, /private/etc/hosts, and /private/etc/sudoers; captures...

CVE-2026-40140: Uncontrolled Resource Consumption

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting...

CVE-2026-23664: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

PT-2026-7399

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 1607 versions prior to 10.0.14393.8868 Microsoft Windows 10 1809 versions prior to 10.0.17763.8389 Microsoft Windows 10 21H2 versions prior to 10.0.19044.6937 Microsoft Windows 10 22H2 versions prior to 10.0.19045.6937...

CVE-2022-23703

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays during update. This would potentially allow an attacker to intercept and modify network communication for software updates...

The vulnerability of the client in the Kermit protocol implementation of the C-Kermit software for serial and network communication allows a perpetrator to execute arbitrary code.

The vulnerability of the Kermit protocol implementation in the C-Kermit software for serial and network communication lies in the absence of an authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file on behalf ...

EUVD-2019-9491

Malware in sbrugna...

EUVD-2006-0969

Malware in sbrugna...

EUVD-2006-3819

Malware in sbrugna...

EUVD-2011-0436

Malware in sbrugna...

EUVD-2017-18851

Malware in sbrugna...

EUVD-2021-20233

Malware in sbrugna...

EUVD-2006-0971

Malware in sbrugna...

EUVD-2018-19470

Malware in sbrugna...

EUVD-2019-14682

Malware in sbrugna...

EUVD-2019-14712

Malware in sbrugna...

EUVD-2006-0970

Malware in sbrugna...

Malicious code in optional-native-module-xyz (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91d8c0e42c231414befecab31d6e25c851443c94c0f8eaf179aa62012264967e Any computer that has this package installed or running should be considered...