16137 matches found
js-x-ray @nodesecure/[email protected]
!slsa...
dep-scan v6.3.0
Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...
trailmark v0.5.0
Trailmark Parse source code into queryable graphs of functions, classes, calls, and semantic annotations for security analysis. Trailmark uses tree-sitter for language-agnostic AST parsing and rustworkx for high-performance graph traversal. The long-term vision is to combine this graph with...
Pentest-Home-Lab
Pentest Home Lab A personal cybersecurity home lab for practi...
SecureAI-Scan v0.5.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
MAL-2026-11041 Malicious code in @daylightqc/date-fmt-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c563208137dbdd6b4c26764222942e2b81e815349b596518ff4db5a652b2bf The package declares a postinstall script postinstall.js that runs automatically on npm/pnpm install and POSTs host identifiers hostname, whoami, pwd...
Malicious code in @daylightqc/date-fmt-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c563208137dbdd6b4c26764222942e2b81e815349b596518ff4db5a652b2bf The package declares a postinstall script postinstall.js that runs automatically on npm/pnpm install and POSTs host identifiers hostname, whoami, pwd...
BloodHound v9.5.0-rc5
BloodHound is a monolithic web application composed of an embedded React frontend with Sigma.js and a Go based REST API backend. It is deployed with a Postgresql application database and a Neo4j graph database, and is fed by the SharpHound and AzureHound data collectors. BloodHound leverages grap...
semgrep v1.171.0
Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...
semgrep v1.170.0
Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...
PoCEvolve: Generating Proof-Of-Concept Exploits from Security Patches with Vulnerability-Aware Prompt Evolution
Ideally, the detailed information about a vulnerability should be made available together with the fixing commit. In practice, however, such details often become available only long after the commit, even when a CVE has already been published. During this window, the patch is already public, so...
AperiSolve v3.6.0
Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on...
rev-dep v2.19.1
Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • CLI Reference Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale,...
Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure
TrendAI™ Research breaks down what changed in CISA’s updated advisory on an ongoing PLC exploitation, why this activity might be more dangerous than a similar campaign in 2023, and how organizations can take action now to protect themselves...
ToolGuardian: Declarative Security for AI Agent-Tool Interactions
LLM agents increasingly rely on external tools, expanding capability while creating a new security boundary: third-party tools may appear benign at the interface level while embedding unsafe behavior in implementation. Existing defenses rely on weak metadata, collapse characterization and policy...
MAL-2026-11020 Malicious code in hardhat-gas-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f908ec767bb48d5cf889b1035fc89ff03d0422bfa043e3c361c4faf0002df95 On module load, the package schedules a randomized 5-15 second setTimeout that POSTs a JSON body containing os.hostname, os.userInfo.username,...
omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-73415 via jupyterlab (2.2.8)
jupyterlab PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...
omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-73626 via jupyterlab (2.2.8)
jupyterlab PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...
stackrox v4.11.2-rc.1
Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...