ptcpdump

ptcpdump %20e2e %20e2e Inglese | Cinese ptcpdump è un analizzatore di pacchetti compatibile con tcpdump basato su eBPF, che annota automaticamente i pacchetti con metadati di processo/contenitore/pod quando rilevabile. Ispirato da jschwinger233/skbdump. Indice dei contenuti Caratteristiche...

Malicious code in notafollower1 (npm)

Source: amazon-inspector 7c74ec5369dac32115a9f5f257f512fa0a48d2e914b1f18c5178992b0a1604f9 package.json declares a postinstall script that automatically runs on npm install and fetches AWS ECS container task metadata via the ECSCONTAINERMETADATAURIV4 endpoint task ARN, container names, image names...

MAL-2026-14034 Malicious code in notafollower1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c74ec5369dac32115a9f5f257f512fa0a48d2e914b1f18c5178992b0a1604f9 package.json declares a postinstall script that automatically runs on npm install and fetches AWS ECS container task metadata via the...

aws-ecs-container-agent-tasks Detection

Aws container metadata content !/usr/bin/env python3 -- coding: utf-8 -- """Aws container metadata content.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'aws-ecs-container-agent-tasks Detection', 'description': 'Aw...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the OpenAtNoFollow process. An attacker can cause unintended file ownership or permission changes on host files by placing a symlink in the virt-launcher filesystem, which is then followed via...

Malicious code in npm-global-util (npm)

Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...

CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

Authentication Bypass by Spoofing

Overview Affected versions of this package are vulnerable to Authentication Bypass by Spoofing via the findContainerForPID function. An attacker can access sensitive metadata, configuration, and device information of other containers by spoofing process names through the devLXD API endpoints. Not...

CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...