log4j

Log4J Zero-Day Compilation of log4j OSINT findings, including Detection, Attack Surface, Mitigation, IoCs. I. Overview Summary This vulnerability makes it possible for any attacker who can inject text into log messages or log message parameters into server logs to load code from a remote server...

cve-2019-2725

cve-2019-2725 References: Tenable - https://www.tenable.com/blog/oracle-weblogic-affected-by-unauthenticated-remote-code-execution-vulnerability-cve-2019-2725 Exploit Database - https://www.exploit-db.com/exploits/46780 PaloAlto -...

CVE-2022-26134_check

CVE-2022-26134check The script is used to check remotely if a Confluence server is vulnerable to the CVE-2022-26134 vulnerability. This vulnerability is a remote code execution flaw that allows an attacker to execute arbitrary code on the server if left unpatched. This vulnerability was being...

Malicious code in net-util-y8 (npm)

Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The description field in package.json is a 56KB base64 blob that...

MAL-2026-15901 Malicious code in net-util-y8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The...

Malicious code in boto4 (PyPI)

Source: kam193 b928f1f0d3af6242391cc626a8601d24f60c70d862bfebe6cfe0777c13a8c0b2 During installation, package executes an embedded executable. The executable is capable of executing remote commands, establishing persistence, cryptomining, exfiltrating basic data, further network scanning and...

MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

MAL-2026-14308 Malicious code in libasync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3563869a8df47e05e731eafb6ea62b3d8c60672c038444139d0ff5f8941bebcf The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

Malicious code in anhn-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0f11f74231c27bd3e3ac41dea5290466f042224f64547d88a328d6b87cf657 bin/install/install.js appends a heavily obfuscated top-level IIFE obfuscator.io-style rotated string array 0x240a/0x4963 with arithmetic index...

Malicious code in @wizloft/harness-plugin-repository-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8197c156f5877fb7a024a3007bed2da30176f74960e3fa271cac4c4369f2705 dist/index.js of @wizloft/harness-plugin-repository-files ships a small legitimate wizloft-harness repository-files plugin followed at line 209 by a...

Update your Mac: Screen Sharing vulnerability exploited in the wild

The Dutch National Cyber Security Centre NCSC issued a warning after being notified of several incidents where a vulnerability in Apple’s Screen Sharing feature was exploited to install Monero cryptominers. The vulnerability, tracked as CVE-2026-65400, was patched by Apple on August 6. It is an...

MAL-2026-13921 Malicious code in envpack-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a061ac72b9e392fee182ad4873aab0cc9a64694a11228438a7838343b96d338f envpack-conf 1.0.1 is a trojanized copy of the pkg-conf utility. index.js appends a top-level async IIFE that runs whenever the module is imported. T...

Malicious code in ai-perf-toolkit (PyPI)

Source: kam193 41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba During import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in rrequests (PyPI)

Source: checkmarx 06f65269b50b6cebcd54c9be1a267f52626bc95f94d9e0ebcbe89c86b03488ec Malicious packages typosquatting the popular requests package. payload execute a cryptomining malware --- Credit: OpenSSF source...

Malicious code in requuests (PyPI)

Source: checkmarx add900896883e60604145a44ada9b8e7fb1013ea91ee1b719b7b3e26a94824ae Malicious packages typosquatting the popular requests package. payload execute a cryptomining malware --- Credit: OpenSSF source...

Malicious code in reuests (PyPI)

Source: checkmarx 8595aba5fb09b2fb54831d18452e4a1980daf222f8ea4d62b50d29446419c309 Malicious packages typosquatting the popular requests package. payload execute a cryptomining malware --- Credit: OpenSSF source...

Malicious code in requestts (PyPI)

Source: checkmarx 0c0ffc8f86c690c110698019cf875b931478cfd7c059ea4da99532950ae57829 Malicious packages typosquatting the popular requests package. payload execute a cryptomining malware --- Credit: OpenSSF source...

Malicious code in requeests (PyPI)

Source: checkmarx 4f52373c3c99a0107c5d679e9ec09cd42dd3260168c30a3b20246bb5b2109861 Malicious packages typosquatting the popular requests package. payload execute a cryptomining malware --- Credit: OpenSSF source...

Malicious code in requess (PyPI)

Source: checkmarx c2f8ad6ce2f92726fe81822a7b0221d62e01f1c48c7eb6ad87e0758cfca42ccf Malicious packages typosquatting the popular requests package. payload execute a cryptomining malware --- Credit: OpenSSF source...