Malicious code in typecript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03604fc37a8607bf5c14f409dc9d13308bff3e7ec145de955ae13a07c13da92e [email protected] is a typosquat of 'typescript' whose scripts/postinstall.js performs an install-time dropper attack. Payload strings are stored a...

Malicious code in typescipt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b97af3a328b837904c7860b7acbae33bea28afb53949905868867905c14be6 Package name typosquats typescript. The postinstall script scripts/postinstall.js XOR-decodes a download URL and a PowerShell launcher using key...

MAL-2026-14147 Malicious code in typescipt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b97af3a328b837904c7860b7acbae33bea28afb53949905868867905c14be6 Package name typosquats typescript. The postinstall script scripts/postinstall.js XOR-decodes a download URL and a PowerShell launcher using key...

Malicious code in typescipt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b080f58ace02e860729134afd887943345248628e5c201a5fd2e46c71f439d29 Package name typosquats 'typescript'. scripts/postinstall.js runs at npm install time and: 1 POSTs a JSON body with the installer's platform label to...

MAL-2026-14146 Malicious code in typescipt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b080f58ace02e860729134afd887943345248628e5c201a5fd2e46c71f439d29 Package name typosquats 'typescript'. scripts/postinstall.js runs at npm install time and: 1 POSTs a JSON body with the installer's platform label to...

Malicious code in tyepescript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a867a5fc578cb6dcb759370e837d1a4c7e24f6db63c0c0f781e2c24995905e6 tyepescript-cli is a typosquat of typescript. Its scripts/postinstall.js XOR-decodes key stf2026 a set of obfuscated byte arrays that resolve to an...

MAL-2026-14143 Malicious code in tyepescript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a867a5fc578cb6dcb759370e837d1a4c7e24f6db63c0c0f781e2c24995905e6 tyepescript-cli is a typosquat of typescript. Its scripts/postinstall.js XOR-decodes key stf2026 a set of obfuscated byte arrays that resolve to an...

safer-dependencies v0.6.0

Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...

MAL-2026-14140 Malicious code in vite-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e61dd39d0c1d39a3b80b7138582b334480c2fb89e990a2b64e6c59050a998f The package's exported getPlugin/setPlugin functions decode two base64 constants svgValidateKey, svgValidatePattern at runtime. svgValidateKey decode...

Malicious code in vite-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e61dd39d0c1d39a3b80b7138582b334480c2fb89e990a2b64e6c59050a998f The package's exported getPlugin/setPlugin functions decode two base64 constants svgValidateKey, svgValidatePattern at runtime. svgValidateKey decode...

kill-chain-vulnerability-scanner

Kill Chain Scanner A Python-based automated web applicatio...

wp2exp-2026

wp2exp2026 🔥 WordPress All-in-One Exploit Framework — Detector · Scanner · Enumerator · Exploit · Escalation wp2exp2026 is the rebranded, battle-tested successor of the wp2shell framework. It merges the original wp2shell checker/exploit chain, three public CVE-2026-63030 PoC kits Ch4120N,...

CVE-2026-15792

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service DoS, making the BuildKit service unavailable. Mitigation Avoid building container images using...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 and IBM Db2 federated server shipped with IBM WebSphere Remote Server

Summary IBM Db2 and IBM Db2 federated server are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 and IBM Db2 federated server has been published in a security bulletin CVE-2026-18096, CVE-2026-18097, CVE-2026-16480, CVE-2026-10543,...

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

Summary Every Linuxfabrik check plugin that supports the shared --test argument routed through lib.lftest.test will, when --test is supplied, treat the first CSV element as a filesystem path and read its full contents as the plugin's simulated STDOUT — running as root when the plugin is invoked...

GHSA-RH9C-RQVG-F7PR linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

Summary Every Linuxfabrik check plugin that supports the shared --test argument routed through lib.lftest.test will, when --test is supplied, treat the first CSV element as a filesystem path and read its full contents as the plugin's simulated STDOUT — running as root when the plugin is invoked...

LibreNMS Vulnerable to Remote Code Execution via AboutController

Remote Code Execution via AboutController in LibreNMS Summary A Remote Code Execution RCE vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the snmpget configuration parameter to execute arbitrary system commands. When the /about...

GHSA-JF24-8G2H-2WG7 LibreNMS Vulnerable to Remote Code Execution via AboutController

Remote Code Execution via AboutController in LibreNMS Summary A Remote Code Execution RCE vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the snmpget configuration parameter to execute arbitrary system commands. When the /about...

CVE-2026-54543

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...

CVE-2026-55426

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugin...