coalmine

Cloud Canary Token Management — Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version — Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...

mcp-security-checklist

🔐 Lista de verificación de seguridad de MCP Una lista de verificación de seguridad práctica y mantenida por la comunidad para equipos que construyen y despliegan servidores Model Context Protocol MCP e infraestructura de agentes de IA. Por qué existe esto MCP se está adoptando rápidamente. La guí...

teampcp-supply-chain-attack

Ataque a la cadena de suministro TeamPCP: Guía de análisis técnico y detección CVE-2026-33634 CVSS 9.4 — El ataque a la cadena de suministro CI/CD más impactante de 2026 hasta ahora. Entre el 19 y el 25 de marzo de 2026, el actor de amenazas TeamPCP también rastreado como DeadCatx3, PCPcat,...

MAL-2026-16089 Malicious code in raydium-clmm-sdk (npm)

raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...

Malicious code in krdpass-auth-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...

MAL-2026-15648 Malicious code in @fdr-mar/promos-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff10da2d93550bf81006c507400661d5d6d163e7ed31fd2dabc6c3d9be805e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

Malicious code in 3layerdipstack1igc1l (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f377c60953bae14cc75545afcab2dfdaff56f29f0f13abc7424ee4a163505805 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14668 Malicious code in 3layerdipstack8yfoyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dd84ecfadffe762f801df8835edd82d85918ddc082406e3ace09dffa3dc0a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackbz1nv9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f476e04aa8223211da688c991805ba888578ea3b1dcefd32c455e7c7cf24f6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackc6c5kn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5095fa04b6e4feb276e9a1376a4b4c7644115b5ffc5021f55edbf5c5646d2c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14685 Malicious code in 3layerdipstackaac4df (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0bb9bed9084299a78c5e02a3445db4714cb438a527dd9d0198f6d1d96610e4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14927 Malicious code in 3layerdipstacktc0tq7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e08bf9444f045afb089203c34015ace9ed96effd7dfd69152a49ef1596795d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14782 Malicious code in 3layerdipstackiud1lz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bfbdce5458620287aecad1c66caa8c2effa5af255fe4787bffd153024b505d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackq4ek0f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d889748f378b114bb74220ed9ecf1dfbf2548c5126539fe997b409e201c4b23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14677 Malicious code in 3layerdipstack9nawzv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69be0b13e8c0686a5610a86df340163be1a4a20c3b23d823333512e165fc921b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14560 Malicious code in inspectstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc87250d7ea2211f538d56ca04d81a6653e6493beb475ea371873ddfe6a65e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in desmoswork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92541d82d133f0d80ad0e7dd4dc1595038f64af50558f26398c0a1c3627928aa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-13668 Malicious code in @lambda-platform/lambda-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a4d9bac602cd3fca6afbcee8dde788580934920352178864343fab46fa64b No static or traced-code signals of exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or...

Malicious code in @simplipayng/checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ead1207956df050d2746ae899d5ea9132fbc4c35684f9e992599c5ef10259c The bundled main dist/index.js executes an evalatob... blob at module top level, so any Node-side require of the package SSR, tests, Next.js server...