CVE-2026-39393 Post-Installation Re-entry via Cache-Dependent Install Guard Bypass in ci4ms

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, the install route guard in ci4ms relies solely on a volatile cache check cache'settings' combined with .env file existence to block...

MAL-2025-1069 Malicious code in cache-dependency-binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 719cb7b517dc44e5112a9f6aa3c73a8d8793719f5e0e544c9977820bb2689fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cache-dependency-binary

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in cache-dependency-binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 719cb7b517dc44e5112a9f6aa3c73a8d8793719f5e0e544c9977820bb2689fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...