3966 matches found
Malicious code in 2nestjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...
MAL-2026-15902 Malicious code in peertube-plugin-video-views-counter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'...
Malicious code in peertube-plugin-video-views-counter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'...
apollo-x-ultimate
APOLLO-X ULTIMATE v1 WordPress Exploit Framework - The Dig...
hpe-exploit
Create a text file with IP addresses of remote HPE OneView devic...
ShadowPhish
🕵️♂️ ShadowPhish - APT Awareness Toolkit Versión: 1.0 Autor: Joas A Santos Simulador visual para concienciación sobre ciberseguridad, phishing e ingeniería social basada en APT. 🔥 Características ✅ Generador de PDF malicioso ✅ Macro de Word con shellcode remoto ✅ Ofuscación de PowerShell Base64,...
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...
Malicious code in AzureCdnInfo.edrtester (VSCode)
The Visual Studio Code Marketplace extension AzureCdnInfo.edrtester version 1.0.4 presents as an EDR/telemetry test utility but is a beaconing backdoor. On activation, extension.js loads edrdrill.js, which performs host reconnaissance — hostname, current working directory and local IP — and...
MSC-2026-11558
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11560
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11557
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11559
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11556
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
Malicious code in spc_login (npm)
Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for keys matching...
Malicious code in spc-grafeno-login (npm)
Source: amazon-inspector 01c074fc169a09169385a53a74ea0bc928f45bf20d40621d7c4b4657e28c01f2 The package's preinstall.js lifecycle script auto-executes on npm install and performs two attacker-benefiting actions against the installer. First, it enumerates process.env for keys matching...
Malicious code in spc-grafeno-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c074fc169a09169385a53a74ea0bc928f45bf20d40621d7c4b4657e28c01f2 The package's preinstall.js lifecycle script auto-executes on npm install and performs two attacker-benefiting actions against the installer. First, ...
MAL-2026-15633 Malicious code in spc-grafeno-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c074fc169a09169385a53a74ea0bc928f45bf20d40621d7c4b4657e28c01f2 The package's preinstall.js lifecycle script auto-executes on npm install and performs two attacker-benefiting actions against the installer. First, ...
CVE-2015-8562
CVE-2015-8562 - Reverse shell Python Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header: root@kitploit: Fecha de vulnerabilidad: 17/12/2015 Autor del exploit: anarc0der Versión: Joomla 1.5 a 3.4.5 CVE : CVE-2015-8562 Cómo usar: root@kitploit: Abre un terminal y escucha con nc...
Malicious code in spc_login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...
MAL-2026-15622 Malicious code in spc_login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...