45077 matches found
Malicious code in jest-config-ibm-cloud-cognitive (npm)
Source: amazon-inspector 0c61f6f1f8814b6ae7678997bd33dda80b4570c54bfbd4f2c1c959c90059d539 The package jest-config-ibm-cloud-cognitive was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jellyfish-cloud-gpo655-project (npm)
The package jellyfish-cloud-gpo655-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivx-cloud-client-v1 (npm)
Source: amazon-inspector 6d1fbfc03c64d280029c66ce70086ae89a6300a262c85cf73a4f3a55357ee56d The package ivx-cloud-client-v1 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in iris-cloud-ntm849-project (npm)
The package iris-cloud-ntm849-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in interface-cloud-class-benchmark-debug (npm)
The package interface-cloud-class-benchmark-debug was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in instacart-cloud (npm)
--- Credit: OpenSSF source...
Malicious code in import-omega-long-cloud-gamma (npm)
Source: amazon-inspector 26ef12eb1f77e3a9297d64051d6f96214b0bc858f070a63bfce67924055b48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in imd-cloud-orders (npm)
The package imd-cloud-orders was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-90769
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending...
lure
lure Análisis local de binarios Linux. Cero nube. Cero root. Cero coste. lure es una herramienta local de análisis y sandboxing de ELF Linux para investigadores de seguridad, ingenieros inversos y jugadores de CTF. La versión 0.7.1 añade soporte para binarios ARM64 mediante emulación en modo...
Malicious code in iberia-cloud (npm)
Source: ossf-package-analysis 76236526e0b25dc5788673d125888692300a1525e1a3dbe859ae6fba9eb218c0 The OpenSSF Package Analysis project identified 'iberia-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...
Malicious code in hello-cloud (npm)
The package hello-cloud was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hash-authorize-sanitize-signal-cloud (npm)
Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hash-cloud-short-void-cluster (npm)
The package hash-cloud-short-void-cluster was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in grid-mu-cloud-signal-cat (npm)
Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in grep-pi-final-interpret-cloud (npm)
Source: amazon-inspector 5422369c9543fe29291dab0ecd21197d00e62b593a25270abd1b25736f3bec0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...