27554 matches found
MAL-2026-10835 Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e17110b408450f798af7801913c4ae1a286a4d81496e15d1f79a94426d7ed3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10843 Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d30579e205476f67d9146972cc0e2aabdd79345dabe3af1c9e0d07fd8d81a9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10832 Malicious code in @gocortexio/npmgremlinbox-malware-c2-beacon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5e787cb37cd00670a6df8b8489fd71e5c54b8af2216948669be4a0480f428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10860 Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58e0b7489bb5ef9967ddda5eb651a0a399c73ae03e692909f34f864b189bde46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10842 Malicious code in @gocortexio/npmgremlinbox-openpbs-2-3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a66e3fdf500614035fa89cb285a3a94a898e6890333031745ac4312f6e5caf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10856 Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fac92ee65337be0a32cfe771e1a471827b35d08304b02a76ae80b479fb7cac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10862 Malicious code in @gocortexio/npmgremlinbox-wxwindows (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1640e484da8cbebf69e53491713558d561edf9b388275a3ae5e33ce967b4292c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10831 Malicious code in @gocortexio/npmgremlinbox-linux-man-pages-copyleft (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3be191a3f3fb6afbef71a5e68c523245d8b473f713b55c7648bcbc29651979d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10861 Malicious code in @gocortexio/npmgremlinbox-unlicense (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23bb2676a768ebd0e40b34368cca60d48ba7bec21c362d307e1ff87d04b3ba44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10836 Malicious code in @gocortexio/npmgremlinbox-malware-install-execution (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8a5a537b1738692165e905b11697bdac7455cccde5bf8b788767642d26c33b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10810 Malicious code in @gocortexio/npmgremlinbox-cddl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619607f5798c23f341f128fc384bcdbe47227d125c7377a64a950cc36c6c4391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10823 Malicious code in @gocortexio/npmgremlinbox-fdk-aac (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6207192112f56fc40eade4e0eaad3581eef98f723337ff802ec60e569ab6bba8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10821 Malicious code in @gocortexio/npmgremlinbox-eupl-1-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fadc3dc1481610f965f36f4aa49e3cefcae48ce40e0ec2c4f98ef63f62bf00b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10809 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-4-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb7c4b37d26321a43dd2b0ea06e7043e8e265c27876e80d5f62a2979f763509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10807 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-at (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a567f9fda6a70475cc32be7b5392bbc1a3c1787b8323c1ff2bc6c237e198fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10796 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac07dbbcaab394576264b09782849aa49feace0efe500ab7e1f0967a10649718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10783 Malicious code in @gocortexio/npmgremlinbox-agpl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 953a2af5be9b66d468b8015bd834521662d227c24928b715c0fa21d4b1c8609d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GO-2026-5952 sigstore-go has a multi-log threshold bypass via single compromised log in github.com/sigstore/sigstore-go
sigstore-go has a multi-log threshold bypass via single compromised log in github.com/sigstore/sigstore-go...
CVE-2026-49834 sigstore-go: Multi-log threshold bypass via single compromised log
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...
