ls-poc

CVE-2026-30368 Proof of concept !IMPORTANT Questa vulnerabilità è stata corretta e ora richiede credenziali, usa la soluzione alternativa per eseguire azioni su te stesso. Introduzione CVE-2026-30368 consente a un attaccante di controllare i dispositivi degli studenti tramite una debolezza di...

Malicious Package

Overview ably-forks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in ably-forks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3c510b1758cfff971e520dd0a78157b1e35918897519edc2fa0364bc46159b The package ably-forks was found to contain malicious code. Source: ghsa-malware b26088266049a671acc67187ede8f130532eb10e90e61293e96211f7ad0c1103 Any...

MAL-2026-939 Malicious code in ably-forks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3c510b1758cfff971e520dd0a78157b1e35918897519edc2fa0364bc46159b The package ably-forks was found to contain malicious code. Source: ghsa-malware b26088266049a671acc67187ede8f130532eb10e90e61293e96211f7ad0c1103 Any...

MAL-2025-14505 Malicious code in andrii.bulat.ably (npm)

The package andrii.bulat.ably was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in ably-realtime (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6070 Malicious code in ably-realtime (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ably-engineering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea2f9c81a90e54e316c75ace4b265b7eea50ab7c006fdaaa6084411adebb4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ably-sales-demo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1329a9a4ad55c5ef0230b58a21648b4425bbde53212764b02bffcd44be07648f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8889 Malicious code in ably-engineering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea2f9c81a90e54e316c75ace4b265b7eea50ab7c006fdaaa6084411adebb4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8890 Malicious code in ably-sales-demo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1329a9a4ad55c5ef0230b58a21648b4425bbde53212764b02bffcd44be07648f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ably-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d967a47be503ff66f55656b06164bada463c061062132aa799b7a22e5856b6f0 The OpenSSF Package Analysis project identified 'ably-cli' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1716 Malicious code in ably-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d967a47be503ff66f55656b06164bada463c061062132aa799b7a22e5856b6f0 The OpenSSF Package Analysis project identified 'ably-cli' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

RedEyes Exploiting Ably Platform Using FadeStealer and Wiretapping Capabilities

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary RedEyes, a state-sponsored APT group, is targeting individuals through spear phishing emails and employing an Infostealer with wiretapping capabilities, utilizing the Ably platform for command and contro...

ScarCruft Hackers Exploit Ably Service for Stealthy Wiretapping Attacks

The North Korean threat actor known as ScarCruft has been observed using an information-stealing malware with previously undocumented wiretapping features as well as a backdoor developed using Golang that exploits the Ably real-time messaging service. "The threat actor sent their commands through...

ScarCruft Hackers Exploit Ably Service for Stealthy Wiretapping Attacks

The North Korean threat actor known as ScarCruft has been observed using an information-stealing malware with previously undocumented wiretapping features as well as a backdoor developed using Golang that exploits the Ably real-time messaging service. "The threat actor sent their commands through...

Malicious code in documentation-ably-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f6bf5586a7addf25073456bb7b754dafa5c124cc264cb37b2005088598555ee The OpenSSF Package Analysis project identified 'documentation-ably-realtime' @ 1.0.2 npm as malicious. It is considered malicious because: - Th...

MAL-2023-1161 Malicious code in documentation-ably-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f6bf5586a7addf25073456bb7b754dafa5c124cc264cb37b2005088598555ee The OpenSSF Package Analysis project identified 'documentation-ably-realtime' @ 1.0.2 npm as malicious. It is considered malicious because: - Th...

Malicious Package

Overview documentation-ably-realtime is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...