Lucene search
+L

44464 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/23 2:11 p.m.•34 views

Malicious code in simplenewnpmpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76315a0ce965c3a1f5b6342caa9d9ce8db4b341b641b2dbb696ebd52bd6149ec On require/import, index.js issues an HTTPS GET to a hardcoded interactsh OAST subdomain dapnhid534ch06s9vpm0mbg1httu5gytc.oast.fun with the...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/23 2:10 p.m.•19 views

MAL-2026-16477 Malicious code in com.apple.unityplugin.storekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920277566757bdc38563c7e2150e906790478cbd7a0c48f0bb53004e82eec4ca The package impersonates an Apple/Unity StoreKit internal namespace com.apple.unityplugin.storekit and, on require, index.js performs an HTTPS GET to...

5.8AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/23 2:10 p.m.•37 views

Malicious code in com.apple.unityplugin.storekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920277566757bdc38563c7e2150e906790478cbd7a0c48f0bb53004e82eec4ca The package impersonates an Apple/Unity StoreKit internal namespace com.apple.unityplugin.storekit and, on require, index.js performs an HTTPS GET to...

5.8AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2026/09/23 1:52 p.m.•3 views

@ossph/temple-ui (0.1.7), @pinnacle0/web-ui (>=0.1.102, <=0.1.104) +5 more potentially affected by CVE-2026-59167 via suneditor (>=2.34.3, <=2.47.0)

suneditor NPM version =2.34.3, =0.1.102, =1.0.3-rc.1, =0.1.0, =0.1.0, =0.1.8, =0.1.1, =0.1.12 Source cves: CVE-2026-59167 Source advisory: MEND:CVE-2026-59167...

10CVSS5.8AI score0.00393EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 12:16 p.m.•6 views

cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913), cv.igrp:igrp-core-war (>=1.7.2.230622, <=1.7.3.230802) +26 more potentially affected by CVE-2026-76183 via org.apache.tomcat:tomcat-websocket (>=9.0.5, <=9.0.121)

org.apache.tomcat:tomcat-websocket MAVEN version =9.0.5, =1.7.2.230613, =1.7.2.230622, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.16 and more Source cves: CVE-2026-76183 Source advisory:...

9.8CVSS7.2AI score0.0039EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/09/23 12:16 p.m.•2 views

io.github.t1willi:jolt (>=2.6.2, <=25.08.4), org.apache.tomee.bom:tomee-webprofile (11.0.0-m1) +15 more potentially affected by CVE-2026-76183 via org.apache.tomcat:tomcat-websocket (>=11.0.0-m20, <=11.0.25)

org.apache.tomcat:tomcat-websocket MAVEN version =11.0.0-m20, =2.6.2, =11.0.0, =11.1.3 and more Source cves: CVE-2026-76183 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20532012...

9.8CVSS7.2AI score0.0039EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/09/23 11:18 a.m.•4 views

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (1.0-377-020cf9e) +136 more potentially affected by CVE-2026-77756 via org.apache.tomcat:tomcat-coyote (>=9.0.48, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.48, =3.0.11, =1.0.1, =1.7.0, =6.73, =3.5.5, =3.5.5, =3.1.0, =0.1.3, =1.7.2.230613, =1.8.3.240913 and more Source cves: CVE-2026-77756 Source advisory: MEND:CVE-2026-77756...

3.7CVSS7.2AI score0.00256EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 11:08 a.m.•2 views

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +9032 more potentially affected by CVE-2026-73581 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.59)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.1.3, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-73581 Source advisory: MEND:CVE-2026-73581...

6.5CVSS7.2AI score0.00117EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•3 views

ai.koryki.core:koryki-core (>=0.1.0, <=0.2.0), ai.koryki.core:koryki-duckdb (>=0.1.0, <=0.2.0) +2924 more potentially affected by CVE-2026-91776 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.2)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.24, =0.7.24, =2.2.0, =2.7.1 and more Source cves: CVE-2026-91776 Source advisory: SNYK:JAVA-TOOLSJACKSONCORE-20059686...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•3 views

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34899 more potentially affected by CVE-2026-91776 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.6)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•2 views

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +12352 more potentially affected by CVE-2026-91776 via tools.jackson.core:jackson-databind (>=3.0.0-rc1, <=3.1.6)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.4.4 and more Source cves...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•5 views

ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +11576 more potentially affected by CVE-2026-91776 via com.fasterxml.jackson.core:jackson-databind (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-91776 Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONCORE-20059685...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•5 views

ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +12746 more potentially affected by CVE-2026-89425 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-89425 Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONCORE-20059179...

7.5CVSS7.2AI score0.00492EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•3 views

ai.koryki.core:koryki-core (>=0.1.0, <=0.2.0), ai.koryki.core:koryki-duckdb (>=0.1.0, <=0.2.0) +3307 more potentially affected by CVE-2026-89425 via tools.jackson.core:jackson-core (>=3.2.0, <=3.2.2)

tools.jackson.core:jackson-core MAVEN version =3.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.24, =0.7.24, =2.2.0, =2.7.1 and more Source cves: CVE-2026-89425 Source advisory: SNYK:JAVA-TOOLSJACKSONCORE-20059180...

7.5CVSS7.2AI score0.00492EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 3:08 a.m.•5 views

ac.pao:reports-web (1.0.0), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +34899 more potentially affected by CVE-2026-91777 via com.fasterxml.jackson.core:jackson-databind (>=2.19.0, <=2.21.6)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.19.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.6 and more Source cves:...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 2:21 a.m.•6 views

ai.abkr.open:any (>=1.0.6, <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +12352 more potentially affected by CVE-2026-91777 via tools.jackson.core:jackson-databind (>=3.0.0-rc1, <=3.1.6)

tools.jackson.core:jackson-databind MAVEN version =3.0.0-rc1, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.4.4 and more Source cves...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 2:17 a.m.•4 views

ai.koryki.core:koryki-core (>=0.1.0, <=0.2.0), ai.koryki.core:koryki-duckdb (>=0.1.0, <=0.2.0) +2924 more potentially affected by CVE-2026-91776 via tools.jackson.core:jackson-databind (>=3.2.0, <=3.2.2)

tools.jackson.core:jackson-databind MAVEN version =3.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.24, =0.7.24, =2.2.0, =2.7.1 and more Source cves: CVE-2026-91776 Source advisory: MEND:CVE-2026-91776...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/23 2:06 a.m.•5 views

ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +12746 more potentially affected by CVE-2026-89425 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-89425 Source advisory: MEND:CVE-2026-89425...

7.5CVSS7.2AI score0.00492EPSS
SaveExploits0
osv_mal
osv_mal
•added 2026/09/23 2:03 a.m.•14 views

MAL-2026-16439 Malicious code in internallib_v550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef32979e04c5e9caca40fb38a9c9ed2b9a75e015e47a580a538b95541012b648 Package internallibv550 is named to resemble an internal private library and is published to the public npm registry, matching the classic...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/23 2:03 a.m.•32 views

Malicious code in internallib_v550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef32979e04c5e9caca40fb38a9c9ed2b9a75e015e47a580a538b95541012b648 Package internallibv550 is named to resemble an internal private library and is published to the public npm registry, matching the classic...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder