Malicious Package

Overview kit-map-vim is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in kit-map-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03873a12af48745e3fd5173ce736267aebd3290be427275073562b8e1ada61fc On import of kit-map-vim, dist/index.mjs unconditionally spawns dist/internal/calc-math.dat as a detached child process after a SHA-256 self-check...

MAL-2026-13915 Malicious code in kit-map-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03873a12af48745e3fd5173ce736267aebd3290be427275073562b8e1ada61fc On import of kit-map-vim, dist/index.mjs unconditionally spawns dist/internal/calc-math.dat as a detached child process after a SHA-256 self-check...

CVE-2026-73072

creationtimestamp| type| source ---|---|--- 2026-08-12 13:46:02+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1 2026-08-20 03:00:04+00:00| published-proof-of-concept| Telegram/70I5ZXCQ9tuhykRUfpeQOhK2E7uKn9kN9IGVXWKzWNyM 2026-08-21 00:00:12+00:00|...

CVE-2026-73074

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:59+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1...

CVE-2026-73076

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:57+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1...

CVE-2026-73078

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:54+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1 2026-08-13 09:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxccuthbg2f...

CVE-2026-73077

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:52+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-47162 DESCRIPTION: Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in...

Linux Distros Unpatched Vulnerability : CVE-2026-73072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, s...

Linux Distros Unpatched Vulnerability : CVE-2026-73078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vi...

Linux Distros Unpatched Vulnerability : CVE-2026-73077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype...

Linux Distros Unpatched Vulnerability : CVE-2026-73074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t...

Photon OS 5.0: Vim PHSA-2026-5.0-92-0950

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0950. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-73070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in...

Linux Distros Unpatched Vulnerability : CVE-2026-73076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwri...

Malicious code in svelte-vim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c572d78a3be9d0fc30b6124c044c329fec518da18bb9e1ca3c22d7f18195e3 No a static rule matches or traced behavior indicative of exfiltration, install-time remote code execution, silent relay, credential distribution,...

Malicious Package

Overview svelte-vim-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-13769 Malicious code in svelte-vim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c572d78a3be9d0fc30b6124c044c329fec518da18bb9e1ca3c22d7f18195e3 No a static rule matches or traced behavior indicative of exfiltration, install-time remote code execution, silent relay, credential distribution,...

ALPINE-CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...