@xhmikosr/decompress: Path traversal via symlink chain

Impact When extracting an untrusted archive with the default decompressinput, output API, a crafted archive containing a chain of symlink entries can make a later entry resolve outside the output directory. The lexical containment checks pass, but the kernel follows the planted symlinks to a path...

SUSE CVE-2026-101894

The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompressinput, output API relies on lexical containment checks that do not account for the kernel following a planted symlink chain. An attacker can supply a crafted archive containing chained symlink...

Malicious code in fs-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e82e98343807c39ea786017de4d2a7455815424155ca2a856333d895c8a48b The package presents itself as a filesystem/data-helper library, but its exported getTransactions/loadtransactiondata functions are a two-file...

MAL-2026-17301 Malicious code in fs-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e82e98343807c39ea786017de4d2a7455815424155ca2a856333d895c8a48b The package presents itself as a filesystem/data-helper library, but its exported getTransactions/loadtransactiondata functions are a two-file...

Malicious code in @selfpentest/eslint-pentest-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f338876601180482b20a42fbd799b9d4e1b059bf7d733b5db448f7fc6d3455ff Package presents itself as an ESLint plugin but the exported plugin object is an empty shell. index.js unconditionally invokes a steal routine at top...

MAL-2026-17293 Malicious code in @selfpentest/eslint-pentest-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f338876601180482b20a42fbd799b9d4e1b059bf7d733b5db448f7fc6d3455ff Package presents itself as an ESLint plugin but the exported plugin object is an empty shell. index.js unconditionally invokes a steal routine at top...

CVE-2026-102930

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the embedded wheels'...

Malicious code in @hrmony/lohndateien (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743e2b2a4a3cf2758e6eb457dbc47857751d31379b13a48a2da25fc23f8e9701 index.js executes on module load and performs three attacker-beneficial actions against a hardcoded remote endpoint at...

MAL-2026-17267 Malicious code in @hrmony/lohndateien (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743e2b2a4a3cf2758e6eb457dbc47857751d31379b13a48a2da25fc23f8e9701 index.js executes on module load and performs three attacker-beneficial actions against a hardcoded remote endpoint at...

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

MikroTik RouterOS MikroTrick Chain Detect

Detects exposure to the MikroTrick exploit chain in MikroTik RouterOS before 6.49.21 / 7.23.4 / 7.24.2: SSH ROSSSH banner CVE-2026-86060 / CVE-2026-67279 and reachable btest bandwidth-server on TCP/2000 CVE-2026-67277. Does not attempt authentication bypass or kernel memory disclosure...

Malicious code in exptredd (npm)

The package exptredd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

Exploit for CVE-2026-101894

CVE-2026-101894 — @xhmikosr/decompress symlink-chain path trav...

Malicious code in hardhat-lock (npm)

Source: amazon-inspector 035a099bd6a60e41f1e1cbc1b70f27fecb9bef3f12d54e016d6991b581fc880f The npm package [email protected] publishes itself as a logger/middleware but its identity and contents are inconsistent with that purpose: README badges, LICENSE, index.d.ts and docs/ are copied from the...

Malicious code in hardhat-zet (npm)

Source: amazon-inspector 37cd33c0908189c0085fba153be1c42776411968aa5ad652dd7ffdef88b318bc [email protected] is published under a name that impersonates the Hardhat Ethereum tooling ecosystem, but its README, type definitions and docs/ tree are copied verbatim from the unrelated pino logger projec...

Evaluating Whether GPT-6 Astra Performs Unsanctioned Supply-Chain Attacks

This technical report presents an alignment evaluation developed and performed by the UK AI Security Institute for assessing whether advanced AI systems take unsanctioned actions outside the scope of their assigned task. We evaluate whether frontier models conduct supply-chain attacks against...

PT-2026-102635

Name of the Vulnerable Software and Affected Versions @socket.io/cluster-engine versions prior to 0.1.1 Description In clustered deployments, the software uses inherited object properties when looking up session IDs controlled by an attacker. By using special property names like proto or...

Malicious code in hardhat-zet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cd33c0908189c0085fba153be1c42776411968aa5ad652dd7ffdef88b318bc [email protected] is published under a name that impersonates the Hardhat Ethereum tooling ecosystem, but its README, type definitions and docs/ tree...

MAL-2026-17234 Malicious code in hardhat-zet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cd33c0908189c0085fba153be1c42776411968aa5ad652dd7ffdef88b318bc [email protected] is published under a name that impersonates the Hardhat Ethereum tooling ecosystem, but its README, type definitions and docs/ tree...

MAL-2026-17233 Malicious code in hardhat-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035a099bd6a60e41f1e1cbc1b70f27fecb9bef3f12d54e016d6991b581fc880f The npm package [email protected] publishes itself as a logger/middleware but its identity and contents are inconsistent with that purpose: README...