USN-8636-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas...

USN-8631-1: Linux kernel vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8630-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

MAL-2026-13925 Malicious code in bcs-compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b93f1a0694dc37c94e18c12eb32ebe9cab96ded318e46ee5c774db80f4a648 On require'bcs-compact', index.js runs a self-scrubbing IIFE that reads the installer's Sui wallet keystore at /.sui/sui.keystore,...

CVE-2026-70427

A flaw was found in Jenkins. Attackers who can control agent processes can exploit this vulnerability by providing specially crafted .tar or .tar.gz archives to the Jenkins controller. This is due to unsafe handling of symbolic links with effectively empty names during archive extraction...

MAL-2026-13924 Malicious code in internallib_v392 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa6db9e4a601df500639714e53f29cde2413c54a6ec31ea6bf38fbb0aabd2f index.js exports a function that invokes /bin/bash -c to curl a remote reverse-shell script from reverse-shell.sh and pipe it to sh, targeting the...

MAL-2026-13819 Malicious code in kanyut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd1fedbe6fa65ad732715731698661fbe733cc186c28634d4f0424284dcbe7 A a static rule matched on keyword co-occurrence ping, GET, id across widely separated lines in lib/Utils/generics.js. The matched tokens are...

MAL-2026-13805 Malicious code in egair0810 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2778f49499126b52d7dc9bbf728ed62bc8177ea325300c7907f2a4b854436507 The package contains a single index.html file declared as the package main, presenting a fake 'Just a moment...' / Cloudflare Turnstile page with...

MAL-2026-13826 Malicious code in mobicommn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fdfcbe5e1e182dcc1972748c2ccb13792e2db392a5404ba08a423b8d184da5 The tarball contains just index.html and package.json main: index.html. index.html mimics a Cloudflare Turnstile challenge and, on the Turnstile...

Malicious code in dzcvhfruwluwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94746f13a653388ae268279888acdb3aceabbdbc5c7444e406af0dfb6317a6d9 The package's sole shipped file is index.html, a fake 'Cloudflare Verifying...' page containing an obfuscator.io-style script that reconstructs the U...

Malicious code in mobicwkgjmx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790620aeb9129471875ad3bbfd9e5c379b4cf2a8a5cbc920148be5d37ca3f9d1 Package [email protected] contains only two scanned files and no static or traced findings indicating credential access, install-time execution of...

Malicious code in vlbhvgovbbhfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...

Malicious code in hlksdcixycvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91dec68a77b15daa1f923bcfe876d283a8fea8d8cdf3d2ea27888b8eb522b97 The tarball contains a single file, index.html, declared as the package main. The HTML renders a Cloudflare Turnstile-themed 'verification' page...

MAL-2026-13797 Malicious code in cvbniydplwe3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edbef37139b40a366aacea90abbd4b80ca581921f213b98ffb17db3b857bfcd The tarball contains only index.html declared as package.json main and no JavaScript, no lifecycle scripts, and no Node-executable entry point...

Malicious code in cvvkshuelwiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f325329894b841474989d30370570a7f1b68d02334db1b98dcaf109899fa9 Package [email protected] contains 2 files with no a static rule matches and no traced behaviors of concern. No install-time scripts, network...

MAL-2026-13811 Malicious code in hcfguyfrmblp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f806fc6db71a1b888ba1f86d790b7a2866b4911e7f77ade2d375237e8c0a6ea2 The tarball contains only package.json and index.html, with no lifecycle scripts and main set to index.html. The HTML page mimics a Cloudflare...

MAL-2026-13784 Malicious code in bgncvhferucfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf8639ccc5d2a70ae2e0ce754b76e1ca525699413f5d696289714005e86c57 The package's sole content is a single obfuscated HTML file declared as main. When loaded in a browser, the page renders a fake Cloudflare Turnstile...

MAL-2026-13839 Malicious code in vczxijghsvizu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bae2fa8ce447bf7b8dbe7b16f14e37b56f713aff508b26f937188a1570d8309 Package [email protected] contains 2 files with no a static rule matches and no traced behavior indicating exfiltration, install-time code...

MAL-2026-13822 Malicious code in mnhdjoweuq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095b631b3ea82334aa5d3ffb4c015340670beebb533d0e016023d997a3ce7e56 Package contains only package.json and index.html, with main pointing at the HTML file. index.html mimics a Cloudflare Turnstile 'Just a moment'...

MAL-2026-13799 Malicious code in cvmbxcjiasdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925628ce795fdbf222c292ae4ccfbe710eda2fa1b6fd521db3379f9569e16f9b The package contains a single index.html file declared as main and no JavaScript entry point, lifecycle scripts preinstall/install/postinstall/prepar...