Malicious code in cache-poisoning-pwn-demo (npm)

Source: amazon-inspector dacd21af4f62dd3183bfc4126d1cbcf18600a1c72301b7ae8ca401ec7e44f94e The package's postinstall hook node -e "try require'./dist/postinstall.js'; catche " loads dist/postinstall.js, which bundles a poisoned is-number module whose top-level IIFE unconditionally calls...

Malicious code in qazaq-cli (npm)

Source: amazon-inspector 31fa15731b4c683297d550bb3157dff08f2bfa3db01c14952cd35c7c61407d0a The package's default AI provider hardcodes the destination opengateway.gitlawb.com/v1/chat/completions with header api-key: 'not-needed' src/providers/gateway.js:3-4. The default value of QAZAQPROVIDER is...

Malicious code in cheaty-sync-bot (npm)

Source: amazon-inspector 45b192c71c59ccca1d9cc720372bd29f39eae8b5da4d572cd1e8312d6b57d6b4 cheaty-sync-bot ships a clipboard-sync CLI that hardcodes a single Telegram bot token index.js:10 owned by the package author. There is no configuration path for installers to supply their own bot — every us...

Malicious code in insomnia-plugin-poc-m4gester2 (npm)

Source: amazon-inspector 1b2b63f22e7d0d8f23c608a3c109163e06e2bd6a1dd716305e0d8adaf6be6b86 Package ships only a package.json with no plugin code, declaring a postinstall lifecycle script that runs echo PWNEDBYDEEPLINK /tmp/pwned.txt on every npm install. This writes a marker file to the installer'...

Malicious code in test-pkg-x0 (npm)

Source: amazon-inspector 0d0014944456f668a25fa484bf7cb5f36a7128d6a585b86d9294d8d49b23049a Package declares scripts.postinstall pointing at shim.js, a script that runs unconditionally on npm install. shim.js branches on uname -s Darwin/MINGW/Linux and executes OS-native commands on the installer's...

Malicious code in react-dom-v17 (npm)

Source: amazon-inspector f55f6e35ab09a2fcd6521dac51aa4baa4cfa726958bc266a0d56fc14de240a29 Package name impersonates the widely-used react-dom package react-dom-v17. package.json declares preinstall: node index.js, which fires automatically on npm install. The preinstall script index.js shells out...

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

Source: amazon-inspector 38a525aea57681df6c21035b723701fa6067f091fd81ac26bb3fcc8e2126c43e package.json declares a postinstall lifecycle hook that runs calc.exe on the installer's machine during npm install. The main entry point exports only an empty requestHooks array, providing no actual Insomni...

Malicious code in @whalent/agent-core (npm)

Source: amazon-inspector dfd40ffe52986a560961c8d4d9d7a3ec526813f9a2f335cef9c6884ca9f6d2cf The package's bundled runtime dist/index.cjs opens a WebSocket to a hardcoded gateway at wss://memory.whalent.com/gw/sdk/ws and integrates with node-pty and childprocess spawn to run terminal sessions SHELL ...

Malicious code in @vibelet/cli (npm)

Source: amazon-inspector 3f3dc6503f9f63413994c6d0b2e19f22ebcf17f5e7ba9f713ce26ecf69c92c6c The @vibelet/cli package ships a daemon bundle dist/index.cjs, invoked by the vibelet bin and by vibelet start/restart/reset that starts an HTTP+WebSocket server, spawns an interactive PTY running...

openSUSE 16 Security Update : joe (openSUSE-SU-2026:21408-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21408-1 advisory. This update for joe fixes the following issue - CVE-2026-13412: improper validation in tag-file parser can lead to arbitrary command execution bsc126937...

CVE-2026-65711

CVE-2026-65711 affects sysPass up to version 3.2.11. An authenticated administrator can trigger an OS command injection via the backup path. The FileBackupService constructs a tar shell command by concatenating the admin-configurable siteBackupPath without proper sanitization (no escapeshellarg o...

PT-2026-67589

Summary Oh My Posh re-renders the resolved path string, which contains the raw folder names taken from the filesystem, through the Go text/template engine. That engine's function map exposes a cmd function that runs arbitrary OS commands. A directory whose name contains a Go template expression i...

CVE-2026-24727: Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...

PT-2026-67602

Summary pheditor's terminal feature restricts callers to an allowlist of commands TERMINAL COMMANDS and rejects shell metacharacters. The allowlist is enforced as a PREFIX match with no argument validation, and the allowlist includes binaries that grant arbitrary command execution through their o...

CVE-2024-58354

cal.com calcom repository, later renamed cal.diy is affected by a repository takeover vulnerability in its GitHub Actions workflows. The workflow pr.yml uses the pullrequesttarget trigger with the repository's default write permissions and passes them down to check-types.yml. check-types.yml then...

CVE-2026-16796

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...

CVE-2026-65606

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

CVE-2024-58354: Improper Neutralization of Special Elements used in a Command

cal.com calcom repository, later renamed cal.diy is affected by a repository takeover vulnerability in its GitHub Actions workflows. The workflow pr.yml uses the pullrequesttarget trigger with the repository's default write permissions and passes them down to check-types.yml. check-types.yml then...

CVE-2026-65605: Improper Neutralization of Input During Web Page Generation

SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View database cell rendering. A Template column value is rendered as HTML via text/template without auto-escaping, and EscapeHTML is only applied when HasUnclosedHtmlTag returns true; because balanced...

CVE-2026-65690: Improper Limitation of a Pathname to a Restricted Directory

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory by supplying a crafted filename. Attackers can exploit this path traversal...