kali-packer

Kali-Packer ここは以前、Kali-Vagrantのビルドスクリプトのホームでした。 Kali 2025.2以降、KaliチームはVagrant VMを生成するためにPackerを使うのをやめ、現在はDebOSを使用しています。 これは、私たちの他の/標準のVMを生成するために使用されるのと同じ方法です。 このリポジトリはもはやKali Vagrantイメージを担当していないため、Kali-Packerに改名されました。 このリポジトリは本番環境では使用されていないため、最新かつ正確ではない可能性があります。 参考資料 : README.md: README.packer.md...

kali-arm

Kali-ARM ビルドスクリプト Kali Linux ARM ビルドスクリプト。 これらは、公式の Kali Linux ARM イメージを生成するために使用しているものと同じビルドスクリプトです。ここにあります: https://www.kali.org/get-kali/ このリポジトリには、より多くのデバイスをサポートする追加スクリプトも含まれていますが、これらを使用するにはビルドを行う必要があります。 詳細については、次を参照してください: https://www.kali.org/docs/arm/ ビルド これらのスクリプトは、Kali Linux の...

cs50-cybersecurity-final-project

Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...

Source

LibreWolf 소스 저장소 이 저장소에는 LibreWolf를 구성하는 모든 패치와 테마, 그리고 LibreWolf를 빌드하기 위한 스크립트와 Makefile이 포함되어 있습니다. 또한 LibreWolf 설정을 포함하는 설정 저장소도 있습니다. LibreWolf 개요 graph LR FFSRCFirefox Source FFSRC--Tarball---Source subgraph librewolf-community/ SettingsSettings--"librewolf.cfgpolicies.json"--Source...

`tinymember` was removed from crates.io due to affiliation with malicious code

While tinymember did not directly contain malicious code, it was owned by the same user as arone and aronenao, which contained suspicious build scripts. This crate had 2 versions published on 2026-08-18 that had a total of 27 downloads. There were no crates depending on this crate on crates.io. T...

CVE-2026-45311

CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the runtests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it runs without any user approval prompt. cargo test compiles and executes arbitrary code: test binaries, build.rs build...

Malicious Package

Overview build-scripts-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in build-scripts-utils (npm)

Ten packages published by npm user asdxzxc at version 1.0.10 target developers working on AI and LLM tooling. Each package masquerades as a developer utility while executing a two-stage payload triggered via postinstall: package.json → lib/setup.js → lib/worker.js. Credential harvesting:...

MAL-2026-4276 Malicious code in build-scripts-utils (npm)

Ten packages published by npm user asdxzxc at version 1.0.10 target developers working on AI and LLM tooling. Each package masquerades as a developer utility while executing a two-stage payload triggered via postinstall: package.json → lib/setup.js → lib/worker.js. Credential harvesting:...

EUVD-2009-0189

Malware in sbrugna...

EUVD-2017-12292

Malware in sbrugna...

EUVD-2020-4309

Malware in sbrugna...

EUVD-2022-6662

Malicious code in bioql PyPI...

Exploit for CVE-2023-4130

README This repo accompanies my research article Eternal-Tux...

Linux Distros Unpatched Vulnerability : CVE-2020-11986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to ...

Malicious code in fusion-starter-build-scripts (npm)

The package fusion-starter-build-scripts was found to contain malicious code...

MAL-2025-21079 Malicious code in fusion-starter-build-scripts (npm)

The package fusion-starter-build-scripts was found to contain malicious code...

CVE-2025-6705

A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, the system’s build scripts were executed without proper isolation, potentially exposing a privileged token. This token enabled the publishing of new...

CVE-2025-6705

A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, the system’s build scripts were executed without proper isolation, potentially exposing a privileged token. This token enabled the publishing of new...

CVE-2025-6705

A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, the system’s build scripts were executed without proper isolation, potentially exposing a privileged token. This token enabled the publishing of new...