privacybadger

Privacy Badger Privacy Badger is a browser extension that automatically learns to block hidden trackers. Privacy Badger is made by the leading digital rights nonprofit EFF to stop companies from spying on you. Privacy Badger sends the Global Privacy Control signal to opt you out of data sharing a...

BruteRatel-DetectionTools

BruteRatel-DetectionTools A collection of Tools and Rules for decoding Brute Ratel C4 badgers All tools and rules are based on samples identified by PaloAlto in their report https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Yara Rule The yara rule has been tested against the samples includ...

badger-builder

badger-builder badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles. Simply provide badger-builder a flavor for your desired profile and it will prompt OpenAI for fitting configurations. Listener/payload profile configs that are AI generated: C2 URIs Request/respon...

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

Summary Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send Badger stream data to the target group’s store. In addition, the receiv...

GHSA-RRWH-6JRQ-WP5V Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

Summary Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send Badger stream data to the target group’s store. In addition, the receiv...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

MAL-2026-3399 Malicious code in money-badger-open-rpc-test-bugbount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c3ecacb08f3cfb0b165eadaafd3a0d6acfffc34898a6149370c8cc9ba3843e The package money-badger-open-rpc-test-bugbount was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in money-badger-open-rpc-test-bugbount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c3ecacb08f3cfb0b165eadaafd3a0d6acfffc34898a6149370c8cc9ba3843e The package money-badger-open-rpc-test-bugbount was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in money-badger-open-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d70a5231934ee14ab33334a3de0db40d5520fb4ef092a5a24cbdffff9751e The package money-badger-open-rpc was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3353 Malicious code in money-badger-open-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d70a5231934ee14ab33334a3de0db40d5520fb4ef092a5a24cbdffff9751e The package money-badger-open-rpc was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-102088

Malicious code in stablebadgerz3n npm...

EUVD-2025-102134

Malicious code in solebadgerz3n npm...

EUVD-2025-101860

Malicious code in thoughtlessbadgerz3n npm...

EUVD-2025-102143

Malicious code in slowbadgerz3n npm...

Malicious code in stable_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73330b901f9f071b56af1c93cf538fd1fe8b6edc5476db0781648efe8e76e7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100231

Malicious code in conventionalbadgerz3n npm...

Malicious code in sparkling_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb106169e5a9ee05da355d6958b8f2b7f5122c1d02d389b68bbbee8f1a6c832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122509 Malicious code in philosophical_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c37c85771c226cdaaf44cca0dc86081824795e79d49a07d8ec925f940686b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...