22 matches found
Anvil
Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...
MAL-2026-11817 Malicious code in @servicetitan/anvil-icon (npm)
npm/@servicetitan/anvil-icon is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malware in @servicetitan/anvil-icon
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @servicetitan/anvil-token
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @servicetitan/docs-anvil-uikit-contrib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-11815 Malicious code in @servicetitan/anvil-css-utilities (npm)
npm/@servicetitan/anvil-css-utilities is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...
Malicious code in @servicetitan/anvil-css-utilities (npm)
npm/@servicetitan/anvil-css-utilities is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...
Malware in @servicetitan/anvil-css-utilities
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @servicetitan/anvil-icons
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @servicetitan/anvil-icons (npm)
npm/@servicetitan/anvil-icons is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11818 Malicious code in @servicetitan/anvil-icons (npm)
npm/@servicetitan/anvil-icons is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malware in @servicetitan/anvil-themes
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @servicetitan/anvil-fonts
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @servicetitan/anvil-fonts (npm)
npm/@servicetitan/anvil-fonts is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malware in @servicetitan/anvil-react
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
anvil-connect (>=0.1.24, <=0.1.36), anvil-connect-jwt (0.1.2) potentially affected by unknown CVE via jsjws (0.7.7)
jsjws NPM version 0.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on jsjws and may be impacted: - anvil-connect =0.1.24, =0.1.36 - anvil-connect-jwt 0.1.2 Source cves: unknown CVE Source advisory: MEND:WS-2016-0074...
anvil-connect (>=0.1.24, <=0.1.36), anvil-connect-jwt (0.1.2) potentially affected by unknown CVE via jsjws (0.7.7)
jsjws NPM version 0.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on jsjws and may be impacted: - anvil-connect =0.1.24, =0.1.36 - anvil-connect-jwt 0.1.2 Source cves: unknown CVE Source advisory: MEND:WS-2015-0048...
unverified_exploits
Unverified Exploits - Rule-Based Exploit Generation & Testing...