tanscript-exploit-check

Mini Shai-Hulud サプライチェーン攻撃 — IOC チェッカー curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash または、クローンしてローカルで実行: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd tanscript-exploit-check ./check-tanstack-exploit.sh...

PT-2026-44730

Name of the Vulnerable Software and Affected Versions compliance-trestle affected versions not specified Description An arbitrary file write issue exists in the trestle author jinja command due to improper validation of the -o/--output argument. The application fails to sanitize directory travers...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...