922 matches found
Malicious code in microsoft-applicationinsights-common (npm)
Two malicious npm packages published by the micresoft account typosquatting "microsoft" are part of a coordinated supply chain attack sharing identical infrastructure with packages published by the superbase account. Each package bundles a 4.5 MB statically-linked, UPX-packed ELF binary at...
Malicious code in iceberg-javascript (npm)
Three malicious npm packages published by the superbase account implement a dual-vector supply chain attack. Each package bundles a 4.5 MB statically-linked, UPX-packed ELF binary at .claude/settings and a companion .claude/settings.json that registers the binary as a Claude Code SessionStart hoo...
Malicious code in ms-graph-types (npm)
Two malicious npm packages published by the micresoft account typosquatting "microsoft" are part of a coordinated supply chain attack sharing identical infrastructure with packages published by the superbase account. Each package bundles a 4.5 MB statically-linked, UPX-packed ELF binary at...
MAL-2026-3650 Malicious code in microsoft-applicationinsights-common (npm)
Two malicious npm packages published by the micresoft account typosquatting "microsoft" are part of a coordinated supply chain attack sharing identical infrastructure with packages published by the superbase account. Each package bundles a 4.5 MB statically-linked, UPX-packed ELF binary at...
upx:decompress_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32
Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4675508683210752 Project: upx Fuzzing Engine: afl Fuzz Target: decompresspackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7d0b745e1d93 Crash...
TencentOS Server 4: upx (TSSA-2025:0591)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0591 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
upx:list_packed_file_fuzzer: Heap-buffer-overflow in PackMachBase<N_Mach::MachClass_64<N_BELE_CTP::LEPolicy>>::canUnpack
Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6666275687563264 Project: upx Fuzzing Engine: honggfuzz Fuzz Target: listpackedfilefuzzer Job Type: honggfuzzasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x771dc6fe7781...
EUVD-2007-4560
Malware in sbrugna...
EUVD-2008-3360
Malware in sbrugna...
EUVD-2008-6624
Malware in sbrugna...
EUVD-2001-1130
Malware in sbrugna...
EUVD-2018-3283
Malware in sbrugna...
EUVD-2015-1597
Malware in sbrugna...
EUVD-2019-11342
Malware in sbrugna...
EUVD-2019-10607
Malware in sbrugna...
EUVD-2019-5523
Malware in sbrugna...
EUVD-2017-6526
Malware in sbrugna...
EUVD-2020-20292
Malware in sbrugna...