Malicious code in cowsay-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f9486b25540d8b6cc57f25e49747500f20e247fa207953354e74d2cc62fbfd The package cowsay-fancy was found to contain malicious code...

Malicious code in @casaverso/frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48584fd15701448c3394285943de2520455a7b1fc07cead90b74d535437feda4 The package @casaverso/frontend-core was found to contain malicious code. Source: ghsa-malware...

MAL-2026-638 Malicious code in solhint-plugin-hyperlane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1aa9de63bf20821ba2b8081862d56bf4238d4d5138cdfae10fa1d260ee9b57 The package solhint-plugin-hyperlane was found to contain malicious code. Source: ghsa-malware...

MAL-2026-628 Malicious code in @casaverso/frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48584fd15701448c3394285943de2520455a7b1fc07cead90b74d535437feda4 The package @casaverso/frontend-core was found to contain malicious code. Source: ghsa-malware...

CVE-2026-1778: Improper Certificate Validation

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed...

CVE-2026-1777: Cleartext Transmission of Sensitive Information

The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: minio, podinfo, maru, dbmate, dockerize, kapp-controller, vault-benchmark, gke-gcloud-auth-plugin, kustomize, cortex, nri-haproxy, chisel, verticadb-operator, postgres-operator, kubernetes-csi-livenessprobe, fluxcd-kustomize-mutating-webhook, rabbitmq-cluster-operato...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: minio, podinfo, maru, dbmate, dockerize, kapp-controller, vault-benchmark, gke-gcloud-auth-plugin, kustomize, cortex, nri-haproxy, chisel, verticadb-operator, postgres-operator, kubernetes-csi-livenessprobe, fluxcd-kustomize-mutating-webhook, rabbitmq-cluster-operato...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: minio, podinfo, maru, dbmate, dockerize, kapp-controller, vault-benchmark, gke-gcloud-auth-plugin, kustomize, cortex, chisel, verticadb-operator, postgres-operator, kubernetes-csi-livenessprobe, fluxcd-kustomize-mutating-webhook, rabbitmq-cluster-operator, conjur-cli...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, rabbitmq-cluster-operator, local-path-provisioner, steampipe, wuzz, ingress-nginx-controller, sealed-secrets, docker, amazon-cloudwatch-agent-operator, wire-go, kube-vip-cloud-provider, pguser, step, nri-cassandra, k3d,...

@activepieces/piece-amazon-s3 (>=0.5.4, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +978 more potentially affected by CVE-2026-25128 via fast-xml-parser (>=5.0.9, <=5.3.3)

fast-xml-parser NPM version =5.0.9, =0.5.4, =0.0.1, =0.1.3, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.0.0, =1.7.16, =2.33.6, =1.4.37, =1.6.3 and more Source cves: CVE-2026-25128 Source advisory: GHSA-37QJ-FRW5-HHJH...

Malicious code in snapshot-date (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

MAL-2026-610 Malicious code in snapshot-date (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

CLEANSTART-2026-KZ63902 tar

Multiple security vulnerabilities affect the velero-plugin-for-aws package. tar. See references for individual vulnerability details...

CLEANSTART-2026-JM36781 Within HostnameError

Security vulnerability affects the velero-plugin-for-aws package. Within HostnameError...

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens. One of the extensions in question is Amazon Ads Blocker ID: pnpchphmplpdimbllknjoiopmfphellj, which...

CVE-2025-66488

Discourse is an open source discussion platform. A vulnerability present in versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0 affects anyone who uses S3 for uploads. While scripts may be executed, they will only be run in the context of the S3/CDN domain, with no site credentials...

CVE-2025-66488

Discourse (open source platform) has a vulnerability affecting installations using S3 for uploads, present in versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. The issue allows script execution within the S3/CDN domain context when HTML/XML uploads are processed; no site credentials ar...

Threat Actors Using AWS WorkMail in Phishing Campaigns

Introduction At Rapid7, we track a wide range of threats targeting cloud environments, where a frequent objective is hijacking victim infrastructure to host phishing or spam campaigns. Beyond the obvious security risks, this approach allows threat actors to offload their operational costs onto th...

GHSA-8RRH-RW8J-W5FX vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, label-studio, airflow, py3-cassandra-medusa, spamcheck, ansible-operator-fips, superset, awx, tritonserver-backend-vllm-cuda-12.9, kubeflow-katib, open-webui, request-1276, py3-setuptools, nemo-rl-cuda-13.0, semgrep, nemo, datadog-agent,...