Malicious code in aws-gulp-tasks (npm)

The package aws-gulp-tasks was found to contain malicious code...

Malicious code in aws-secure-zipper (npm)

The package aws-secure-zipper was found to contain malicious code...

Malicious code in dibs-aws-trade-article-scraper (npm)

The package dibs-aws-trade-article-scraper was found to contain malicious code...

Malicious code in @zalastax/nolb-aws (npm)

The package @zalastax/nolb-aws was found to contain malicious code...

MAL-2025-10740 Malicious code in @zalastax/nolb-aws (npm)

The package @zalastax/nolb-aws was found to contain malicious code...

MAL-2025-15229 Malicious code in aws-secure-zipper (npm)

The package aws-secure-zipper was found to contain malicious code...

Malicious code in aws-billing-console-angular (npm)

The package aws-billing-console-angular was found to contain malicious code...

MAL-2025-15224 Malicious code in aws-billing-console-angular (npm)

The package aws-billing-console-angular was found to contain malicious code...

MAL-2025-15228 Malicious code in aws-pdk (npm)

The package aws-pdk was found to contain malicious code...

MAL-2025-18440 Malicious code in dibs-aws-trade-article-scraper (npm)

The package dibs-aws-trade-article-scraper was found to contain malicious code...

MAL-2025-15231 Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

MAL-2025-15227 Malicious code in aws-lambda-authenticator (npm)

The package aws-lambda-authenticator was found to contain malicious code...

cn.jarkata:jarkata-encrypt (1.0.0), cn.ponfee:commons-core (>=1.1, <=1.4) +492 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50,...

Malicious code in aws-enumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82e411db1ea78935340bd950942b13579b400264ddef042aa0b07d6952401c45 Package for enumeratin IAM --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-aws-enumerate Reasons base...

MAL-2025-41621 Malicious code in aws-enumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82e411db1ea78935340bd950942b13579b400264ddef042aa0b07d6952401c45 Package for enumeratin IAM --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-aws-enumerate Reasons base...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, falcoctl-fips, gomplate, kube-rbac-proxy, temporal-ui-server-fips, conftest, cilium-certgen, azure-aad-pod-identity-mic, cert-manager-cmctl, cloudnative-pg, karpenter, conjur-cli, aws-sigv4-proxy-fips, kubelet-csr-approver-fips,...

Hacker Accesses Millions of IMDataCenter Records from Exposed AWS Bucket

Florida firm IMDataCenter exposed 38GB of sensitive data including names, emails and ownership info. At least one hacker accessed and downloaded the files...

Ubuntu: Security Advisory (USN-7685-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-191690 Malicious code in bh-25-req-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ddd759ada90b89401904e23b4e8cbe6a3021baf3c34495150b4a713ca7063be0 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Malicious code in bh-usa-req-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8c83e1a14cfb125b4cfcb3e1ca52afd31fb170b78ade2aa3fd31cc846b8ac7da If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...