Malicious code in vjkpwjxbvndelta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 232e538a22dccee3bbca452b7b7ef7cea92bcc79d32cc7586099520703efe763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mx3dxhgic8xhd6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c845fb0cbb218ab8c1affe9c9964c9c2fd342e6b70070115f93fdd5ef4e8cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

Malware-IOCs

Malware Repository of Indicators of Compromise...

wiz-research-iocs

Wiz Research Public IOC Database This repo contains public indicators of compromise aggregated by Wiz Research...

Unit42-Threat-Intelligence-Article-Information

Unit42-Threat-Intelligence-Article-Information This is the repository for indicators of compromise IOCs and other data supporting threat intelligence articles posted on the Palo Alto Networks Unit 42 website...

CVE-2023-7028-Docker

CVE-2023-7028 with Docker 🎯 Want to practice with the new gitlab CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Go to the project : cd CVE-2023-7028-Dock...

certificate-of-compromise

Certificate of Compromise SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service v1.0.0 Living Document & Community Contributions This paper is a living document. ADCS research is not static — techniques get patched, new conditions are discovered, and community analys...

CVE-2026-16460

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject...

EUVD-2026-104093

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject...

CVE-2026-16460

A flaw exists in bootc and ostree where already-staged deployments are finalized without revalidating the container image against the current container signature policy . This allows unsigned OS content, staged under a previous permissive policy, to remain bootable even after the policy is harden...

CVE-2026-16460

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject...

CVE-2026-16460 Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject...

CVE-2026-16460 Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject...

Malicious code in aldi02-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52aad2c9e9c773ff8cc1529316069d58541e3fa677cda7ff75364c644154eb59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zeroz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55c04838c571c7688a361345f76683eefc0e7b1da6719b53cef0285f55b7f99b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ichigo-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in aldi02-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in aemath-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4ba11c491c52f6a459598d106fb4a592940ca56221cf5795c47f998bd5009bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in item-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21768e52f5deae2143dcb4b348368fb1a07efa47856a868a24a0977a52889ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...