59331 matches found
Malicious code in ethers-logger (npm)
Source: ossf-package-analysis 8f43ab2ac9caeed4f5dd0895f4da7d3a646038768f5d0024f443bb527fd1ad95 The OpenSSF Package Analysis project identified 'ethers-logger' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity....
Malicious code in ethers-5 (npm)
Source: amazon-inspector 8842d229aa4e9c24c85ce8a9be99c6690dbf62bef2bdf2ef716865c8a44adda3 The package ethers-5 was found to contain malicious code. Source: ossf-package-analysis f92a03425cd97c753a2412a2f070a5844bfef3fb64534fe79fc37dec3dda5e28 The OpenSSF Package Analysis project identified...
Malicious code in eslint-oldest (npm)
Source: ossf-package-analysis f80ac33a577e9ac06744364bddec668b736dd3e0f4a48d532c2dbdcb368e21b0 The OpenSSF Package Analysis project identified 'eslint-oldest' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...
Malicious code in eslint-config-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 201f83a69c354c3a004e8b9fd7a778bba4540bc35b88fe6eeaac043b0d6dcd18 The OpenSSF Package Analysis project identified 'eslint-config-i18n-scan' @ 10.0.2 npm as malicious. It is considered malicious...
Malicious code in eslint-8 (npm)
Source: ossf-package-analysis fc62673366ae7ad1109086b5169030e17b4ed81be6735878522392329ebca48c The OpenSSF Package Analysis project identified 'eslint-8' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - T...
Malicious code in eslint-8.23 (npm)
Source: ossf-package-analysis d4e01b0c5206bd63f9c05e96300c4f8f6e2f5640c76f4742303f802da707471c The OpenSSF Package Analysis project identified 'eslint-8.23' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ...
Malicious code in eslint-9 (npm)
Source: ossf-package-analysis 7b6f571e9facdadc164a1e0a5ed2a298a233bbc3138ef7df78bae9d0a3d588a4 The OpenSSF Package Analysis project identified 'eslint-9' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - T...
Malicious code in ent-profile-api-client (npm)
Source: ossf-package-analysis f9c39ae8dadaf1b8ac82e8e1f7b312d04c58cb2a208ba535221cae3bac7ae787 The OpenSSF Package Analysis project identified 'ent-profile-api-client' @ 9.3.1 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicio...
Malicious code in enjin-docs (npm)
Source: ossf-package-analysis 24afa8ea540d65aaac41e9b8290ea35057d333217eca4a50410143aa9e993bd4 The OpenSSF Package Analysis project identified 'enjin-docs' @ 15.2.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...
Malicious code in en-calendar (npm)
Source: ossf-package-analysis 0cc66d6eb2f773deb786b69bc29863caf4091bd2bd1f9fe0b7fdaa6fe14aca89 The OpenSSF Package Analysis project identified 'en-calendar' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior...
Malicious code in electron-test-main (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 64731d49ad099a9f118a9485fb5568a4f594576ed888e0bb96f7f278853ec158 The OpenSSF Package Analysis project identified 'electron-test-main' @ 11.0.1 npm as malicious. It is considered malicious...
PYSEC-2026-3872 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
Summary An authenticated user can upload a crafted agent bundle that defines a server-side Python callable tool. The server validates the uploaded bundle, but it does not block dangerous callable: paths in untrusted user-provided agent configs. When the tool is invoked, the runner imports and...
Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
ImpactA Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...
PYSEC-2026-3861 LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
BerriAI litellm =1.82.4 is vulnerable to Server-Side Template Injection SSTI, which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotpromptcontent parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment...
LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
BerriAI litellm =1.82.4 is vulnerable to Server-Side Template Injection SSTI, which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotpromptcontent parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment...
PYSEC-2026-3817 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...
PYSEC-2026-3888 PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
Summary PraisonAI's praisonai.code tool wrappers exported as CODETOOLS for agents expose a workspace setting that the module itself treats as a path-traversal security boundary — readfile, writefile, applydiff, and searchreplace explicitly call ispathwithindirectory and return "… is outside the...
PYSEC-2026-3862 mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...
mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py VulnerabilityRestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses:1...