papers-we-love

Papers We Love PWL is a community built around reading, discussing and learning more about academic computer science papers. This repository serves as a directory of some of the best papers the community can find, bringing together documents scattered across the web. You can also visit the Papers...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

bumblebee

Threat Intelligence Exposure Catalogs Maintained exposure catalogs for recent supply-chain campaigns, built from public threat-intelligence reporting with Perplexity Computer and updated via PRs as fresh campaigns are reported. Pass a catalog to a scan with --exposure-catalog . Review the entries...

MAL-2026-18200 Malicious code in @seggy116/next-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5c18734e8db92923153cc8bbf81fe90bcb53d5fe9d17a7640014d51e165dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @seggy116/next-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5c18734e8db92923153cc8bbf81fe90bcb53d5fe9d17a7640014d51e165dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e58ce3b050fea33c534b17cada105c9c7eef3b0daf59a904a1b31151035a727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pkgship/frpc-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b326de85c188621a7204e38f8d68eea6969822d6012215c9f776fa70054568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kvarzo8f3atestmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a85ccef88aba99ac71165f2b02e40f009e9ac8d25319da2abe5a712a1886ac47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18202 Malicious code in sdk-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea4b599291b3a9c88aa74d76577283eca640df072aa340bf95558077c06527fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea4b599291b3a9c88aa74d76577283eca640df072aa340bf95558077c06527fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lumen-labs-dev/whisper-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2145d9e34cf3963885cc79e221d5c24c17333f9303e3ebd558bd7642c10c2ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

how_to_become_a_malware_analyst

How to Study to Become a Malware Analyst work-in-progress This is @PINKSAWTOOTH's personal opinion and may not necessarily be the best method for you. I hope you can refer to it as one example of a study method. Before reading this, the malware analyst I respect, @hasherezade, has written a blog...

be-a-hacker

Introduction Hacking is the art of using things in unintended ways. For example, if a software's trial is about to expire, you might be able to extend it by changing your computer's date to the previous week. That's hacking. There's no 'one right way' to learn hacking because it is a very broad...

Malicious code in x402-prompt-injection-scan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88f52d4070c48d6b724799575ba65b28cb4b2e218b4eda4a67fbbbe353add870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CUAHarm

Measuring Harmfulness of Computer-Using Agents 🤗 Hugging Face 📄 Paper 📋 Introduction CUAHarm is a benchmark designed to evaluate the safety risks of Computer-Using Agents CUAs - AI agents that can autonomously control computers to perform multi-step actions. Key Features 🔍 CUAHarm Dataset : A...

Malicious code in @pkgship/frpc-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b874d42a9f57d771cd4bb2dac536e6ee9278040e89fe7634bffa4b73217336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18193 Malicious code in opencode-skills-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c84dd18445ee7b0f29f3f76c81efb76a43fa7ef77d4c99b57245f4ef8e72a13a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opencode-skills-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c84dd18445ee7b0f29f3f76c81efb76a43fa7ef77d4c99b57245f4ef8e72a13a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agentic-awesome-skills (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6f2f16354be2dc09e9b3f437c66f13fbe8ea2abed07f5d4bf8281e2ffeebb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

poisontap

PoisonTap - siphons cookies, exposes internal router & installs web backdoor on locked computers Created by @SamyKamkar || https://samy.pl When PoisonTap Raspberry Pi Zero & Node.js is plugged into a locked/password protected computer, it: emulates an Ethernet device over USB or Thunderbolt...