505 matches found
xnu
What is XNU? XNU kernel is part of the Darwin operating system for use in macOS and iOS operating systems. XNU is an acronym for X is Not Unix. XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers...
DARWIN
🧬 DARWIN Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection An evolutionary attack–defense framework that couples DARWIN-Attack with DARWIN-Guard through online adversarial training. Paper · Guard Checkpoint · Installation · Use DARWIN-Attack · Use DARWIN-Guard ·...
CVE-2024-24787-PoC
CVE-2024-24787-PoC On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive. This is not my bug, I just made a PoC for it. Reference...
MAL-2026-18243 Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d85a01dd2d613b035e2c635d3d1e4f40b81e3ee7eea6e868e6fc4175618c123 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d85a01dd2d613b035e2c635d3d1e4f40b81e3ee7eea6e868e6fc4175618c123 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-18244 Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b430da8eb1d9a15b74f4abfe412db5106d498cf018c3a611e2d151a993c7819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b430da8eb1d9a15b74f4abfe412db5106d498cf018c3a611e2d151a993c7819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @k18k/entrypoint-sdk-darwin-x64
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @liauto/darwin-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c28d1be2a555bd8dfb04c636fbc78a5add132fb5be0bfee0ff204a0d529f770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @pkgship/frpc-darwin-amd64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b874d42a9f57d771cd4bb2dac536e6ee9278040e89fe7634bffa4b73217336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17854 Malicious code in opencode2-darwin-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5536c7ac30ec68d1e8ab9f64da77fa154f6d1806df263ad0abaf3af38ab0e378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17853 Malicious code in opencode2-darwin-arm64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6a79212b7f12e5d4cae1e3d44b47da54ab2e77545f488b99f6f2dab8a5e638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-darwin-arm64 (>=1.1.0-rc.1, <=1.39.2)
@reasonix/cli-darwin-arm64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...
reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-darwin-x64 (>=1.1.0-rc.1, <=1.39.2)
@reasonix/cli-darwin-x64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...
@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-x64 (>=7.2.3, <=7.4.0)
@kilocode/cli-darwin-x64 NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...
@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-arm64 (>=7.2.3, <=7.4.0)
@kilocode/cli-darwin-arm64 NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...
@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-x64-baseline (>=7.2.3, <=7.4.0)
@kilocode/cli-darwin-x64-baseline NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...
Malicious Package
Overview @postman-cse/okta-aio-darwin-arm64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...