MAL-2026-18517 Malicious code in @atedone/workspace-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831ecc7c41217227ee159b85e4510e3d58c956be016bd7582e94fefb011565fe On require, the package's top-level state.initialize writes shell integration files into /.config/workspace-context init.zsh,.zshrc,...

Malicious code in @atedone/workspace-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831ecc7c41217227ee159b85e4510e3d58c956be016bd7582e94fefb011565fe On require, the package's top-level state.initialize writes shell integration files into /.config/workspace-context init.zsh,.zshrc,...

chronix

Chronix Self-hosted collaborative workspace for pentesters and red team operators. Captures notes, commands, outputs, and operational context during security engagements. Quick Start Install pipx install git+https://github.com/IceCubeSandwich/chronix Initialize creates account and session secret...

dmi-tcat

DMI TCAT The Digital Methods Initiative Twitter Capture and Analysis Toolset DMI-TCAT allows one to retrieve and collect tweets from Twitter and to analyze them in various ways. Installation You can find detailed installation instructions in the wiki Requirements Twitter API credentials these can...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

GeoLocation_BOF

GeolocationBOF A Cobalt Strike BOF that attempts to retrieve Windows geolocation coordinates without fork & run. It uses the WinRT Geolocator API first and falls back to the legacy ILocation API. Implementation Simple BOF that uses WinRT geolocation with a legacy ILocation fallback. Will flip the...

diaphora-mcp

Русская версия Diaphora MCP Compare two IDA-analyzed binaries from your AI assistant. Diaphora MCP exports the saved IDA databases, runs Diaphora, and lets the AI inspect corresponding functions and their call graphs. The default interface has 10 tools focused on comparison. Diaphora supplies...

rapiddns-cli

RapidDNS CLI 中文文档 A powerful command-line interface for interacting with the RapidDNS API. This tool allows you to perform DNS searches, advanced queries, and large-scale data exports directly from your terminal. Features DNS Search : Search by domain, IP, or CIDR. Advanced Query : Use powerful...

CrushFTP-auth-bypass-CVE-2025-31161

CrushFTP Authentication Bypass - CVE-2025-31161 A comprehensive toolkit for exploiting CVE-2025-31161, an authentication bypass vulnerability in CrushFTP that allows unauthorized user account creation. 🔍 What is CVE-2025-31161? CVE-2025-31161 is a critical authentication bypass vulnerability in...

SecureAI-Scan

SecureAI-Scan An offline scanner for the code that talks to LLMs, MCP servers, vector stores, and Agent Skills. It finds prompt injection, MCP command injection and path traversal, RAG data leaks, and poisoned skills, and it proves each finding with a source → sink trace through your real imports...

ai-kill-chain

Extended Cyber Kill Chain for AI-Era Threats An update to the Lockheed Martin Cyber Kill Chain for defenders working against LLM and agentic AI attacks. Adds a pre-attack stage for model supply chain compromise. Adds AI-specific sub-techniques to each of the original seven stages. Splits the...

DVAP

DVAP - Damn Vulnerable AI Platform Train. Break. Defend. AI Systems. An open-source platform for AI security training, red/blue teaming, CTF, benchmarking, and research. Runs 100% locally. No cloud, no paid APIs, no data leaves your machine. Prerequisites Docker 24+ and Docker Compose v2 16 GB RA...

amradio

AM Radio Break-in System A 12-channel AM radio broadcast system using Red Pitaya FPGA for emergency alert transmission in unmanned tunnels. Why AM radio in a tunnel? During construction and maintenance, vehicles with standard AM radios transit through tunnels that have no mobile coverage. AM...

keepassxc-fzf

keepassxc-fzf Interactive terminal interface for managing KeePass databases using keepassxc-cli and fzf. Features Interactive entry search with fuzzy finder fzf Real-time entry preview password masked Copy to clipboard with auto-clear: Password 10 seconds Username, URL, Notes 30 seconds Keyfile...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract...

llm-council-vapt

LLM Council — VAPT Finding Validation A blind peer-review pipeline that validates a penetration-test finding before it reaches a client. Independent expert lenses assess the finding, blind-review each other, and a Chairman synthesizes one vetted verdict — is it worth reporting, and is the severit...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521...

bbot-ui

BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features 🚀 Zero Setup - Single self-installing file, no manual dependencies 🔴 Live Refresh - Auto-updates while scans are running with accurate status detection 🎯 Smart Status Detection - Accurately...

bithoven

Bithoven 🎼 A High-Level, Imperative Language for Bitcoin Smart Contracts Bithoven is a type-safe, developer-friendly programming language designed to compile down to native Bitcoin Script. It bridges the gap between complex smart contract logic and the low-level stack machine of the Bitcoin Virtu...

dscanner

dScanner 🔍 Automated web reconnaissance tool for security audits Description dScanner consolidates multiple reconnaissance tools into a single command for the initial phase of web pentesting. Only use with authorized systems!!!! 🚀 Installation Required dependencies: curl dnsutils nmap whois httpx...