49 matches found
relayer
Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...
Malicious code in ts-relayer-pub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8ec05f673f1d04b65918474a638737320ac81126814fd8be765bbdc2bb5c1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview ts-relayer-pub is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-6898 Malicious code in ts-relayer-pub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8ec05f673f1d04b65918474a638737320ac81126814fd8be765bbdc2bb5c1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
pipeline-logger (>=1.0.0, <=1.0.2), pipeline-runtime (>=1.0.1, <=1.0.11) +1 more potentially affected by CVE-2026-10143 via kafka-python (1.3.4)
kafka-python PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - pipeline-logger =1.0.0, =1.0.1, =1.0.11 - relayer 2.0.2 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...
pipeline-logger (>=1.0.0, <=1.0.2), pipeline-runtime (>=1.0.1, <=1.0.11) +1 more potentially affected by CVE-2026-10142 via kafka-python (1.3.4)
kafka-python PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - pipeline-logger =1.0.0, =1.0.1, =1.0.11 - relayer 2.0.2 Source cves: CVE-2026-10142 Source advisory: OSV:GHSA-M3PX-Q5GJ-J9X7...
pipeline-logger (>=1.0.0, <=1.0.2), pipeline-runtime (>=1.0.1, <=1.0.11) +1 more potentially affected by CVE-2026-10143 via kafka-python (1.3.4)
kafka-python PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - pipeline-logger =1.0.0, =1.0.1, =1.0.11 - relayer 2.0.2 Source cves: CVE-2026-10143 Source advisory: OSV:PYSEC-2026-2191...
pipeline-logger (>=1.0.0, <=1.0.2), pipeline-runtime (>=1.0.1, <=1.0.11) +1 more potentially affected by CVE-2026-10142 via kafka-python (1.3.4)
kafka-python PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - pipeline-logger =1.0.0, =1.0.1, =1.0.11 - relayer 2.0.2 Source cves: CVE-2026-10142 Source advisory: OSV:PYSEC-2026-2190...
Malicious Package
Overview moustick is a malicious package. This package contains malicious code that fetches and eval a remote payload from attacker-controlled URL https://www.jsonkeeper.com/b/MYUKZ on require in moustick/index.js. The payload is designed to extract RELAYERPRIVATEKEY and JWTSECRET from the victim...
Malicious Package
Overview cookie-parser-legacy is a malicious package. This package contains malicious code that uses another malicious package moustick Snyk Advisory as a dependency to fetch a remote payload from attacker-controlled URL https://www.jsonkeeper.com/b/MYUKZ. The payload is designed to extract...
MAL-2026-4327 Malicious code in ts-relayer-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f9e2000d1658b2543f1c5cbad624d62c9f64ee71f90282e774cb6222c4d857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview ts-relayer-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in ts-relayer-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f9e2000d1658b2543f1c5cbad624d62c9f64ee71f90282e774cb6222c4d857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11432 Malicious code in relayer-engine (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in relayer-engine (npm)
--- -= Per source details. Do not edit below this line.=-...
0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8254 more potentially affected by CVE-2024-48948 via elliptic (>=6.0.2, <=6.5.7)
elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-48948 Source advisory: GHSA-FC9H-WHQ2-V747...
0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8149 more potentially affected by CVE-2024-42459 via elliptic (>=4.1.0, <=6.5.6)
elliptic NPM version =4.1.0, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42459 Source advisory: OSV:GHSA-F7Q4-PWC6-W24P...
0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8832 more potentially affected by CVE-2024-42460 via elliptic (>=2.0.2, <=6.5.6)
elliptic NPM version =2.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =1.0.0, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =6.2.4 and more Source cves: CVE-2024-42460 Source advisory: MEND:CVE-2024-42460...
GO-2024-2874 Inter-Blockchain Communication (IBC) protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go
The ibc-go module is affected by the Inter-Blockchain Communication IBC protocol "Huckleberry" vulnerability. The vulnerability allowed an attacker to send arbitrary transactions onto target chains and trigger arbitrary state transitions, including but not limited to, theft of funds. It was...
Malware in subspace-relayer-front-end
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...