607387 matches found
MAL-2026-13672 Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836c93e5c62158ffed799c206fa3713291692e10efae048c04fff0745f7070f Package [email protected] contains no code patterns matching known supply-chain attack fingerprints. N...
MAL-2026-13677 Malicious code in svelte-kit-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea03ff1abc711e776243e207270c0f7d208521386cc87d94fbb8d64300beb9d No static or behavioral indicators of supply-chain attack were observed in this package version. No lifecycle scripts fetching or executing remote...
Malicious code in svelte-kit-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea03ff1abc711e776243e207270c0f7d208521386cc87d94fbb8d64300beb9d No static or behavioral indicators of supply-chain attack were observed in this package version. No lifecycle scripts fetching or executing remote...
Malicious code in svelte-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2172e0671582a6e9c3359cd893cb96a7a09706ae0670208ddfbc82636a828fed [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating credential access, exfiltration,...
MAL-2026-13679 Malicious code in svelte-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2172e0671582a6e9c3359cd893cb96a7a09706ae0670208ddfbc82636a828fed [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating credential access, exfiltration,...
GHSA-WHVH-WF3X-G77J vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
CVE-2026-45021 vulnerabilities
Vulnerabilities for packages: kuma...
GHSA-3VCP-CHFH-F6R2 vulnerabilities
Vulnerabilities for packages: kuma...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: pulumi-language-dotnet, grype-fips, goreleaser, packer-fips, cerbos-fips, tfsec, grype, pulumi-kubernetes-operator, amazon-ssm-agent, mapotf-fips, argo-events, semaphore, xeol, grafana, gomplate-fips, gomplate, kots, syft, amazon-ssm-agent-fips,...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: mitmproxy, open-webui, airflow...
CVE-2026-45021 vulnerabilities
Vulnerabilities for packages: kuma...
GHSA-3VCP-CHFH-F6R2 vulnerabilities
Vulnerabilities for packages: kuma...
Malicious code in modern-localization (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be23667d11e7ef3357641973b9188175c2068bd2b580a5628773bcdf03533a5 On server-side require of modern-localization, the package's main entry runs a top-level async IIFE syncLanguageSystem that performs an HTTP GET...
Malicious code in @rbx-ts/services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...
Malicious code in map-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80727943437a7e22116b369c010fc965c4854a0c58a053504c4bc55555e90dd4 On import, dist/index.mjs chmods 0755 and spawns the bundled Linux x8664 binary dist/internal/calc-math.dat as a detached background process. The...
Fedora 43 : erlang (2026-4220305a93)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4220305a93 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Fedora 44 : erlang (2026-7a3db128e8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a3db128e8 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Linux Distros Unpatched Vulnerability : CVE-2026-71870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function...
Photon OS 5.0: Perl PHSA-2026-5.0-92-0946
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...