MINI-FXG2-32RG-MV7C

Bulletin has no description...

MINI-7X9Q-JV5M-2HX3

Bulletin has no description...

MINI-7X2F-7F6X-8GM7

Bulletin has no description...

MINI-HW2C-WJCX-7JVC

Bulletin has no description...

MINI-54P6-45PF-757C

Bulletin has no description...

MINI-4H8C-9V75-6XF9

Bulletin has no description...

MINI-6MRG-HWGM-HF5M

Bulletin has no description...

MINI-6RR6-4WPR-PF9C

Bulletin has no description...

MINI-RG8W-VR58-QR3G

Bulletin has no description...

MINI-2WGQ-P785-47FP

Bulletin has no description...

MINI-W989-87W9-42Q7

Bulletin has no description...

MINI-X339-4G4X-QV8X

Bulletin has no description...

MINI-2398-3WG6-H27P

Bulletin has no description...

CVE-2026-19901

creationtimestamp| type| source ---|---|--- 2026-08-15 19:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5e7ud37627...

MAL-2026-14067 Malicious code in upload-to-gcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...

Security Bulletin: This Power System update is being released to address CVE-2026-4937

Summary PowerVM could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested. Vulnerability Details CVEID:CVE-2026-4937 DESCRIPTION: PowerVM could allow a local attacker with administrative privileges t...

Malicious code in adxaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52685b4948dce286ad5cf0bbf4d0a7c8cf6b6a87ebfc2f70e20dbea685ab62c9 The tarball stages an obfuscated JavaScript payload i.js, with an un-obfuscated copy in original.js that gates on window.location.href containing...

Malicious code in @openrepl/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcd297122e7aac00cd0d3d92fcb5f1fc00b6c558571a037b5447eb64bd443b8 package.json declares a preinstall hook node index.js that runs automatically on npm install. index.js shells out via childprocess to execute curl -X...

Malicious code in fastly-vcl-language-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77be5ce1488e7867223b63fd5c90060e98d6a44325ff2f71bed2b61653d649 The package declares scripts.preinstall = 'node vishu.js', which runs unconditionally on npm install. vishu.js fetches the installer's public IP via...

Malicious code in twilio-hackerone-poc-afe6937c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6790435b096935699da3234140accc517ced689047a68e698cae06288939eed9 On npm install, preinstall/postinstall scripts execute id, read environment variables including AWSLAMBDALOGSTREAMNAME, list /var/task, and read pare...