amavis

설치 가능하다면 시스템의 amavis 패키지를 사용하십시오. 전제 조건 소프트웨어 종속성은 Dist::Zilla를 통해 추적됩니다. 그중 일부는 CPAN에서 가져올 경우 비非펄 개발 라이브러리와 빌드 의존성으로서의 GCC를 필요로 합니다: libdb libidn2 libssl libzmq3 예를 들어 Debian 13에서는 다음 명령으로 설치할 수 있습니다: apt-get install build-essential libdist-zilla-perl libdb-dev libidn2-dev libssl-dev libzmq3-dev...

Malicious code in dotenv-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50639fcdb3317812a161b8f54fbf22d2565881af534da0d2ec8f7d37ecbd3f3b The package presents itself as a dotenv parser but on require index.cjs calls a function named dispatchAnalytics that reads dist/stest.jpg, extracts ...

MAL-2026-17657 Malicious code in dotenv-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50639fcdb3317812a161b8f54fbf22d2565881af534da0d2ec8f7d37ecbd3f3b The package presents itself as a dotenv parser but on require index.cjs calls a function named dispatchAnalytics that reads dist/stest.jpg, extracts ...

pdfjs-vuln-demo

PDF.js 취약점 데모 프로젝트 이 프로젝트는 CVE-2024-4367에 보고된 PDF.jspdfjs-dist 라이브러리의 취약점 악용을 시연하기 위한 개념 증명PoC 역할을 하기 위한 것입니다. 실행 방법 이 저장소를 포크하고 클론합니다. npm install npm run dev 테스트 방법 먼저 http://localhost:4321/로 이동합니다. 해당 카드를 클릭하여 테스트하려는 프론트엔드 프레임워크 컴포넌트react, vue, svelte를 선택합니다. 샘플 PDF취약점을 악용하지 않는가 로드되는지 확인합니다...

pdfjs-vuln-demo

PDF.js 취약점 데모 프로젝트 이 프로젝트는 CVE-2024-4367에 보고된 PDF.jspdfjs-dist 라이브러리의 취약점 악용을 시연하기 위한 개념 증명PoC입니다. 실행하기 이 저장소를 포크fork하고 클론clone하세요 npm install npm run dev 테스트해 보기 먼저 http://localhost:4321/로 이동하세요 해당 카드를 클릭하여 테스트하려는 프론트엔드 프레임워크 컴포넌트react, vue, svelte를 선택하세요 샘플 PDF취약점을 악용하지 않는가 로드되는지 확인하세요 /public...

MAL-2026-17505 Malicious code in dotenv-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254f0bcbb8014fb07414eb0b41a898deac682aa8c8b7a8541a0f7538ac274f9a The package is published as 'dotenv-promises' but its bundled manifest declares the internal name '[email protected]' and mimics the dotenv API...

Malicious code in dotenv-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254f0bcbb8014fb07414eb0b41a898deac682aa8c8b7a8541a0f7538ac274f9a The package is published as 'dotenv-promises' but its bundled manifest declares the internal name '[email protected]' and mimics the dotenv API...

Malicious code in virgil-cli (npm)

In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...

MAL-2026-17630 Malicious code in virgil-cli (npm)

In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...

CVE-2026-104848 Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution

Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.1, Tinypool constructs ThreadPool.options from a normal options object and reads the execArgv and env worker options in dist/index.js, allowing values inherited from a polluted Object.prototype to be copied into own...

MAL-2026-17323 Malicious code in cortana-md-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2de4b6992a1dd7177803253b8c214d1ba7cc911cf0e1e7f800e1e9ff7ab5b1 cortana-md-engine is a Baileys-based WhatsApp bot whose bundled entrypoints dist/hosted.cjs and dist/index.cjs hardcode five...

Malicious code in cortana-md-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2de4b6992a1dd7177803253b8c214d1ba7cc911cf0e1e7f800e1e9ff7ab5b1 cortana-md-engine is a Baileys-based WhatsApp bot whose bundled entrypoints dist/hosted.cjs and dist/index.cjs hardcode five...

MAL-2026-17305 Malicious code in esm-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c5c67c48596e011158554f8b5ea57d65a8a8dc3b5f4120d3c9c4d1cf961da2 The package advertises itself as a zero-dependency dotenv parser but its main entry dist/index.cjs and CLI bin dist/cli.cjs both invoke...

Malicious code in testosu888 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faa5787fbebe8c5d73f3291c77975efb91c504dddf6a1d82cbe7e9f25372b27 On loading dist/index.cjs main entry and on running the dot2env CLI dist/cli.cjs, the package invokes a dispatchAnalytics routine that reads...

Malicious code in dotenv-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4369c7fa886fc7d315922759932056664863d71157bcdece943fa53339586f03 Package dotenv-native typosquats the popular dotenv family bundled internal manifest name node-env-buffer and executes an attacker-controlled payload...

CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...

CVE-2026-54160

The Network UPS Tools (NUT) software contains a vulnerability in its GitHub Actions script used for the make-dist workflow. Due to a misconfiguration that mixed privileged code (a write-scoped GITHUB_TOKEN ) with untrusted inputs from PR source branches, a malicious pull request from a fork could...

CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...

CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...

CVE-2026-101079

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...