MAL-2026-2564 Malicious code in gp-auth-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24cae80696867d7d7b835ee70e1ef1e85373092f31cd93e2a35508ae3d2afb3 The package gp-auth-lib was found to contain malicious code. Source: ghsa-malware 73c001ebe2675cd78ef852bc2e78ff6fb837fd64b9b490dbea61c4ff1ca6d146 An...

Malicious code in gp-auth-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24cae80696867d7d7b835ee70e1ef1e85373092f31cd93e2a35508ae3d2afb3 The package gp-auth-lib was found to contain malicious code. Source: ghsa-malware 73c001ebe2675cd78ef852bc2e78ff6fb837fd64b9b490dbea61c4ff1ca6d146 An...

Malicious code in portal-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bb66164a982bdfd5fb6ee5642b76bbe4eb9fa9945fd86d4f650bc7f0fc14ae The package portal-common-ui was found to contain malicious code. Source: ghsa-malware ddf6d37b9f65968118315afcbff2324922502f9e152274487818d62d7bb122...

MAL-2026-2565 Malicious code in portal-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bb66164a982bdfd5fb6ee5642b76bbe4eb9fa9945fd86d4f650bc7f0fc14ae The package portal-common-ui was found to contain malicious code. Source: ghsa-malware ddf6d37b9f65968118315afcbff2324922502f9e152274487818d62d7bb122...

MAL-2026-2873 Malicious code in ts-schema-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa35c0f1b632f24027499340dfbe35df1f1d57bed2a5ad8327d688a7b23507a3 The package ts-schema-helpers was found to contain malicious code. Source: ossf-package-analysis...

The Code Whisperer: LLM and Graph-Based AI for Smell and Vulnerability Resolution

Code smells and software vulnerabilities both increase maintenance cost, yet they are often handled by separate tools that miss structural context and produce noisy warnings. This paper presents The Code Whisperer, a hybrid framework that combines graph-based program analysis with large language...

MAL-2026-2877 Malicious code in unisys-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c759e3a9b4c256239f0ec3be5b97424efc8191d317d82feb632b84e77d6c46eb The package unisys-core was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2868 Malicious code in arlo-meeting-assistant-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f86efb0af8fce5d8b08964a6f53fed7c81bf67b9072c61b3f103118cb382161 The package arlo-meeting-assistant-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2560 Malicious code in @b2b-portal/uch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89eb419e1f7beb102007973e2d226cb2cb5f534096cbc2be8dc538324f3f19db The package @b2b-portal/uch was found to contain malicious code. Source: ghsa-malware e559f0d2d934ad98bda8c11ca6613644ecf3f2584bee7e75c7edf59ecda35d3...

Malicious code in ts-form-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2ff1bf87164fdeb2ca9c37d578f7156164a344ffd11bcdb84ce34880358fea The package ts-form-helpers was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2550 Malicious code in paysafe-apple-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa5a144ffc676202fd8bcc53b7d07b3de04e7320bbae90b2bfc57d67d94c80 The package paysafe-apple-pay was found to contain malicious code. Source: ghsa-malware...

Malicious code in paysafe-google-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd5f70910fb7ec96da87043782f13c0a98612ef9303db86393d58ffb82093d0 The package paysafe-google-pay was found to contain malicious code. Source: ghsa-malware...

Malicious code in paysafe-payments-sdk-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93e9be8a06ed53e5f7b88d33e9f020bf96f51c343c2ffe9bd620bc498c011bf The package paysafe-payments-sdk-common was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2553 Malicious code in paysafe-payments-sdk-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93e9be8a06ed53e5f7b88d33e9f020bf96f51c343c2ffe9bd620bc498c011bf The package paysafe-payments-sdk-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sap-px/pxapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a3dbae0518bc379bebf8a6eecf65c9b7ed68be4b1e352a458a42ba77b5b2d The package @sap-px/pxapi was found to contain malicious code. Source: ghsa-malware f83795730a6230997fb73e029559ad586c6130bc00c0cc6740e3d82f2250b452...

Malicious code in @b2b-portal/form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfd3d2bf611173cd9899eb7ae28620ce52dd78812b47d5f9ca1fc68555c5b70 The package @b2b-portal/form was found to contain malicious code. Source: ghsa-malware 01b5517a25cba37fda750436dbbba1fe86b2c36fb7eafbbb0b49cf17d95e5a...

Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server

Estudio técnico de la vulnerabilidad CVE-2025-5548 Introdu...

The vulnerability of the cs_opt_mem.vsnprintf() function in the analysis engine for binary code from Capstone allows a hacker to execute arbitrary code.

The vulnerability of the csoptmem.vsnprintf function in Capstone’s binary code analysis engine is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the cs_disasm() and cs_disasm_iter() functions in the Capstone compiler allows a hacker to execute arbitrary code.

The vulnerability of the csdisasm and csdisasmiter functions in Capstone’s binary code analysis engine is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Reddit

Large language models LLMs have recently emerged as promising tools for augmenting Security Operations Center SOC workflows, with vendors increasingly marketing autonomous AI solutions for SOCs. However, there remains a limited empirical understanding of how such tools are used, perceived, and...