Malware in @s4yhiitestpoc/r3-https

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s4yhiitestpoc/r3-https (npm)

Source: amazon-inspector b2638f8970897121676d5dc3ed7c002ab9d9ccc3e400283e165297a95e3c1423 On npm install, postinstall.js automatically collects host identity hostname, username, uid/gid, homedir, platform, release, enumerates network interfaces addresses, MACs, CIDRs, reads DNS servers and intern...

MAL-2026-17765 Malicious code in @s4yhiitestpoc/r3-https (npm)

Dependency-confusion proof-of-concept package. A postinstall script runs automatically on installation and sends host and user identifiers hostname, username, home directory, network interface addresses, platform details and npm configuration to collector.oob.s4yhii.com, with a secondary DNS look...

Malicious code in @s4yhiitestpoc/r3-https (npm)

Dependency-confusion proof-of-concept package. A postinstall script runs automatically on installation and sends host and user identifiers hostname, username, home directory, network interface addresses, platform details and npm configuration to collector.oob.s4yhii.com, with a secondary DNS look...

Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.13 advisory. - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allo...

CLEANSTART-2025-GT80206 Security fix for ghsa-2xhq-gv6c-p224 applied in: metrics-server-fips 0.5.2-r3

Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XL99311 Security fix for ghsa-38f7-945m-qr2g applied in: jitsucom-jitsu 2.11.0-r3

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KU07150 Security fix for ghsa-q7rr-3cgh-j5r3 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RV38622 Security fix for ghsa-wmfp-5q7x-987x applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LZ10003 Security fix for ghsa-hvx9-hwr7-wjj9 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QA36813 Security fix for ghsa-5vv4-hvf7-2h46 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FG19009 Security fix for ghsa-9c88-49p5-5ggf applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CY64651 Security fix for ghsa-66ff-xgx4-vchm applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QG09459 Security fix for ghsa-75px-5xx7-5xc7 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OM20895 Security fix for ghsa-jvwf-75h9-cwgg applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HC86648 Security fix for CVE-2026-42582 applied in: trino 480-r3

Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GX50966 Security fix for ghsa-w7vc-732c-9m39 applied in: airflow-2 2.11.0-r3

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CR95275 Security fix for CVE-2026-46718 applied in: apache-nifi 2.6.0-r3

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AO69724 Security fix for CVE-2026-41719 applied in: apache-nifi 2.6.0-r3

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KL73981 Security fix for CVE-2026-25903 applied in: apache-nifi 2.6.0-r3

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...