Malicious Package

Overview whatsapp-core-auth-drzak is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection SQLi vulnerability, exploitable through the advancedQueryData parameter comparator field on an authenticated endpoint. The endpoint...

MAL-2022-2738 Malicious code in energy-phoenix-core-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc673c34e7bea5924e7599982f2bd50d123ea9adef3dff7d4a086d415638d275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bdfd71008501f118552100797abf6fb298f1db14a272dda22ede246874ef20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2190 Malicious code in core-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bdfd71008501f118552100797abf6fb298f1db14a272dda22ede246874ef20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...