MAL-2026-5385 Malicious code in @0xlr/clerk-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff421a5ccb412fd8455e89a1b9875b427ed34af12fa4b188ed4418cd8f52a74 On npm install, postinstall.js enumerates the entire process environment Object.keysprocess.env.sort.forEach along with hostname, username, home...

@agent-native/core (>=0.26.5 <=0.47.1), @intlayer/backend (=8.7.0-canary.0) +6 more potentially affected by CVE-2026-45337 via better-auth (>=1.6.0 <=1.6.10)

better-auth NPM version =1.6.0, =0.26.5, =0.0.33, =0.2.0, =1.6.0, =0.1.2, =0.2.0 Source cves: CVE-2026-45337 Source advisory: SNYK:JS-BETTERAUTH-17173857...

MAL-2026-2582 Malicious code in @guards-lib/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b72a9569fc4d43fe6d130bd5ecad08b4e9442b7ca7d8b03c4bfc8a44916d3e6 The package @guards-lib/auth was found to contain malicious code. Source: ghsa-malware 47112682da1426da21d8164ed1b9dd3a0dfa3e989e43b8143aad8831987f65...

Insufficient Granularity of Access Control

Overview Affected versions of this package are vulnerable to Insufficient Granularity of Access Control in the cloud providers API. An attacker can gain unauthorized access to cloud provider APIs and perform actions with attached cloud credentials by sending crafted requests through the proxy API...

EUVD-2000-0090

Malware in sbrugna...

MAL-2025-47528 Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

Malicious code in amdocs-auth-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...

MAL-2025-5350 Malicious code in @paysafe-consumer/authentication (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2388dc2e56b582bfdd2495ad1e116a98d1e0aef671877287030751da40e1857b Any computer that has this package installed or running should be considered...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to improper validation of SAML response signatures which allows an attacker to inject a malicious, signed XML element as the first signature, bypassing proper verification and enabling impersonation of any SPID or...

Microsoft Windows: Audit Security System Extension

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecuritysystemextension.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Security System Extension Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Fedora Update for krb5 FEDORA-2011-16296

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2011-16296 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...