4277 matches found
ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
Supply-Chain
Software Supply Chain Security A comprehensive three-book series on software supply chain security, covering threats, defenses, and governance. This open-source manuscript provides security professionals, developers, and organizational leaders with practical guidance for securing modern software...
DepFuzzer
DepFuzzer DepFuzzer is a tool used to find dependency confusion or project where owner's email can be takeover. Install the tool /!\ This tool requires python = 3.10 /!\ $ python3 -m venv .venv $ source .venv/bin/activate $ pip3 install -r requirements.txt Or you can use the docker image : $ dock...
confused
Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...
linux-root-kit
About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...
Malicious code in @sxm-web/client-sdk-core (npm)
@sxm-web/client-sdk-core is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 0.0.1, 1.0.0, 1.0.1, 2.0.0, 1.1.0, 3.0.0, 13.3.7 has a postinstall script th...
Malicious code in @greenlake/auth (npm)
@greenlake/auth is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0 has a postinstall script that runs node beacon.cjs on npm install, and index.js...
Malicious code in @greenlake/context-pane (npm)
@greenlake/context-pane is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0, 1.0.0 has a postinstall script that runs node beacon.cjs on npm instal...
Malicious code in @greenlake/mfe-login-url (npm)
@greenlake/mfe-login-url is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 2.0.0, 1.0.0, 3.0.0 has a postinstall script that runs node beacon.cjs on np...
MAL-2026-17878 Malicious code in util-foriepft (npm)
[email protected] was published to npm on 2026-10-08 17:34 UTC by user regex33-hackerone. It is described as utility helpers but ships no library code: index.js is an empty module. thunderboltRegistry.js runs when the package is loaded, executes host commands through childprocess and sends thei...
Malicious code in util-foriepft (npm)
[email protected] was published to npm on 2026-10-08 17:34 UTC by user regex33-hackerone. It is described as utility helpers but ships no library code: index.js is an empty module. thunderboltRegistry.js runs when the package is loaded, executes host commands through childprocess and sends thei...
Malicious code in @ppa-web-components/ppa-hotel-collection (npm)
Source: amazon-inspector e442008a433c1edbe8fb25f9b47dd3123f5664672c3901167fc9d3add8a6bd6e @ppa-web-components/[email protected] is a stub package whose only functional code is a callback beacon. The package.json declares scripts.postinstall: "node beacon.cjs", and the same beacon.cjs is...
Malicious code in jshelperdependenceny (npm)
Source: amazon-inspector dc4d19697f4104351bb25b7e568018ec6ed85d626b7265fb4b9682ae12183be9 npm package 'jshelperdependenceny' is published at version 99.0.0 with a preinstall banner stating it is intended to shadow an internal v1.0.0 package of the same name — the classic dependency-confusion shap...
Malicious code in paychex-pdftron (npm)
Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.5.tgz rather th...
Malicious code in sc-hydrate-carousel-price (npm)
Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.3.tgz rather than a registry version range. On npm install,...
Malicious code in @jm-telefonica/multibrand-components (npm)
Source: amazon-inspector 7ef565c5fd4b4baa7e0bff888cf34107fa8a9385932195fa4fd90ad39f250927 package.json at line 9 declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.4.tgz rather than a registry version range. On npm...
Malicious code in @postex/common (npm)
Source: amazon-inspector 2fb98ad3575267cc8fbf617fe6a17000ed10df97d39710f4b7aaddf7225598d7 @postex/[email protected] ships an inert index.js module.exports = and declares a single dependency ltidisafe whose value is a bare HTTPS tarball URL...
Malicious code in @greenlake/session (npm)
Source: amazon-inspector 3255cc4148a62c7ba090d1912d41c572f3ce7ccb6db9cc131132cfd4a0970f43 The package is a scoped-namespace shim version 99.0.1 whose main entry re-exports a Proxy returning no-op functions, allowing consumer builds to resolve this name without errors. On npm install postinstall...
Malicious code in @futurae-public/adaptive-js (npm)
Source: amazon-inspector 18526e44113025f1e08a31eb237515c63ae912a6cfe82bec37c14895f4f23178 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.2.tgz rather than a registry version range. On npm install, npm...
Malicious code in @fmr-ap153177/apex-kit-icons (npm)
Source: amazon-inspector ff7b14a37bdf740ac9f0e4c8978c2c577d39f04d7b897a5d698cbb220ecf3c9a package.json declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.1.tgz instead of a registry version range. On npm install, npm...