Malicious code in ncodeauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00fcaac77b28bc2ce7fd09837de2d46fd48c6bd32d11d39a98e2450d754843f The package ncodeauth was found to contain malicious code. Source: ghsa-malware 844237bb9b9aab92cf332246dacc9675c295acc85e6f914b9b9da957f04f7490 Any...

Exploit for Uncontrolled Search Path Element in Checkmk

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Powerful System Access...

Malicious code in bnia-work (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78b12fa102dbd32d8d3a27c016f7b790124a3a73bdf1970768799e120183c30 The package bnia-work was found to contain malicious code. Source: ghsa-malware 2583fa3177342feb8975727c7ad5873d1a1e7bea2ce3ce445343aaa9a0b3459b Any...

Malicious code in awsm-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8778a330765a0a4f5b15960d7bba1cf4ea76946cd4395eb239af31c497330 The package awsm-core was found to contain malicious code. Source: ghsa-malware ba13f4a6fbc556808377c1e17e991b77feb5d2d08af58861be6460732cfc3d9e Any...

Malicious code in rt-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843ded25c4705270d68a2528b9a2aadd0755998b2880686a4ea7ad2d777a1235 The package rt-footer was found to contain malicious code. Source: ghsa-malware d3f499cb715f4d755c0be8690d154c1da2a95c1195bff56c58d5967d2b680e6e Any...

MAL-2026-143 Malicious code in rt-text-media-grid-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f688a9034313f7d48c41ada2e48af7bd425c27af69a13fb41f5ba38c5eca66de The package rt-text-media-grid-collection was found to contain malicious code. Source: ghsa-malware...

MAL-2026-140 Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

MAL-2026-131 Malicious code in awsm-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8778a330765a0a4f5b15960d7bba1cf4ea76946cd4395eb239af31c497330 The package awsm-core was found to contain malicious code. Source: ghsa-malware ba13f4a6fbc556808377c1e17e991b77feb5d2d08af58861be6460732cfc3d9e Any...

MAL-2026-130 Malicious code in awsm-acslibs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75908418c77ed1eed9d51f2880e20a9608a49fe6e21582715517f0fa4044d349 The package awsm-acslibs was found to contain malicious code. Source: ghsa-malware 566e39645aaa10c8e2d212725d48fa1023624b811c5d98b6c4cf6354d1beba95 A...

Malicious code in scrollbar-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1feac6b077daf292c9f1be24ff5b49cfd07da882dda73a98dcba56ea0a4c903 The package scrollbar-stylecss was found to contain malicious code. Source: ghsa-malware...

CVE-2025-66620 Columbia Weather Systems MicroServer Command Shell in Externally Accessible Directory

An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the fil...

Malicious code in hiqomu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1b14ad8ceaca23c5a536740bb79e0425805fb3df3bd23448dd6cee7af377ad The package hiqomu was found to contain malicious code. Source: ghsa-malware 0bd082bac5a58a31b60a13d745e6ec55d8e49b1e4d5d17c9f3711f28e611f0de Any...

Malicious code in @nestor_hexom/garfield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e97b74c49ae069dbe34f9d8305d62eed7e381a2ee48bfe60938f1b90b3ce7db The package @nestorhexom/garfield1 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-116 Malicious code in jh5o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec5d7cca5e58324cc7dea4623e12ad7bfad0a9ac6812a49373017a13c195a5b The package jh5o was found to contain malicious code. Source: ghsa-malware 01eaba01805549a7aa5e246fd04674dd562885c5fa3e0d4a6d30e1595e3fe945 Any...

MAL-2026-119 Malicious code in klywarns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b7d6c7fb14a0375e83aafab601053676b49f24851d2c8d2ca0b42f4ccd517 The package klywarns was found to contain malicious code. Source: ghsa-malware 0fd557abca883cf56c7a2f4c1b67ff5b64577d170103a99df6a39a991bcd34c1 Any...

Malicious code in klywarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee572661c3786dd95fb006ea7b4d99026b670f00f8e1999c1d961af6d612a2c The package klywarn was found to contain malicious code. Source: ghsa-malware f8ef3f65d8a5142e8b3a669ecd7f5b3891db0031a16d478f7b220fbb41f8d398 Any...

MAL-2026-113 Malicious code in garfield000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6ac9b34a6d30c7ec66b0526fba72fda30519c2b623116e96663d5f3ec73d42 The package garfield000 was found to contain malicious code. Source: ghsa-malware 12e916aed66acb12d51a1fc4b756247f696863776624c776a3b38e84acbdc6fc An...

MAL-2026-115 Malicious code in hiqomu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1b14ad8ceaca23c5a536740bb79e0425805fb3df3bd23448dd6cee7af377ad The package hiqomu was found to contain malicious code. Source: ghsa-malware 0bd082bac5a58a31b60a13d745e6ec55d8e49b1e4d5d17c9f3711f28e611f0de Any...

Malicious code in openblox-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f413a269bb13d7fc0f06d193b4b314762c1418948658dbcce7b416b6cc4e3d4 The package openblox-ts was found to contain malicious code. Source: ghsa-malware 60eca5ca78ef4e2c970e29512a0387609b154359d54bbc1a73473275777615c5 An...

Python Site-Specific Hook Persistence

This Metasploit module leverages Python's startup mechanism, where some files can be automatically processed during the initialization of the Python interpreter. One of those files are startup hooks site-specific, dist-packages. If these files are present in site-specific or dist-packages...