Malicious code in @antv/dipper-map (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

MAL-2026-3876 Malicious code in @antv/dw-random (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency CISA maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive...

CLEANSTART-2026-SW24654 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283 applied in versions: 3.2.1-r0

Multiple security vulnerabilities affect the aws-load-balancer-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RC8C-94M4-FRFH vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

CVE-2026-31609 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

CVE-2026-43100 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

GHSA-463M-22HH-CHVM vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

GHSA-585P-9MG2-6VMM vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

GHSA-H53C-6597-VMFW vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

GHSA-JG3H-4JH8-MFWR vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

CVE-2026-31592 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

GHSA-R5QW-5M8Q-6774 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

CVE-2026-43109 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

CVE-2026-44308

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

Using Bedrock with Claude Code? Your AWS Credentials Are Shared With Every Subprocess

Many developers today are using Claude Code, with a growing portion running it through Amazon Bedrock. For enterprise teams, Bedrock offers major advantages: keeping data inside a VPC, leveraging AWS credits, and integrating with existing IAM controls, monitoring, and security policies. Bedrock...

Malicious Package

Overview knot-activesupport-logger is a malicious package. This package is part of a malicious cluster of Ruby gems published by the threat actor knot-theory. Designed to impersonate legitimate utilities, it executes a payload upon installation that harvests environment variables, SSH keys, AWS...

Gotenberg 代码问题漏洞

Gotenberg is an open-source, developer-friendly API developed by Gotenberg. It is used to convert various document formats into PDF files. Versions of Gotenberg prior to 8.31.0 contained code vulnerabilities. These vulnerabilities stemmed from the default rejection list using regular expressions...

CVE-2026-35062

CVE-2026-35062 affects F5 BIG-IP and related iControl SOAP components. An authenticated iControl SOAP user may obtain information about other accounts, a control-plane issue with no data-plane exposure. Impact described as a low-privileged remote attacker potentially accessing other local account...