308 matches found
Malicious Package
Overview bellatrix-spica-rollup-forever is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious Package
Overview algol-forever-regulus-miranda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview algol-forever-less-exoplanet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview hercules-forever-commitlint-publish is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...
CVE-2026-64290
CVE-2026-64290 affects the Linux kernel via iommufd_fault_fops_read(): on a copy_to_user() failure inside the inner loop, only the inner loop breaks, causing the outer loop to retry indefinitely and spin the reader with fault->mutex held. The public fixes implement breaking the outer while by ...
It pays to be a forever student
Welcome to this week's edition of the Threat Source newsletter. If I haven't said it in a newsletter before, I'll say it now: If you want to be good at cybersecurity, be a forever student. Cultivating and feeding your desire to know how things work is one of the key ingredients to being a hacker...
PT-2026-23185
Name of the Vulnerable Software and Affected Versions TheBi versions through 1.0.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Reflected Cross-Site Scripting XSS. This allows an attacker to inject malicious...
EUVD-2025-179866
Malicious code in cassini-socketio-concurrently-forever npm...
EUVD-2025-178868
Malicious code in forever-regulus-hyperion-commitizen npm...
EUVD-2025-179994
Malicious code in bootstrap-forever-uranology-colors npm...
Malicious code in forever-cypress-public-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d8f2b7403fb7a57f1c5c0016932bfade7e558ec54a15aa56686d6a7431ea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178866
Malicious code in forever-zephyr-pavo-slides npm...
EUVD-2025-178871
Malicious code in forever-heka-polaris-elektra npm...
EUVD-2025-179315
Malicious code in despina-kastra-forever-supervisor npm...
EUVD-2025-178872
Malicious code in forever-cypress-public-package npm...
EUVD-2025-177066
Malicious code in prettier-registry-forever-prettier-plugin-markdown npm...
EUVD-2025-178875
Malicious code in fomalhaut-restart-loglevel-forever npm...
EUVD-2025-178873
Malicious code in forever-cygnus-postcss-jwt npm...
MAL-2025-189965 Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dab104ace8220a6a4d15814c89357d5aee51b5d8f63e9d6df78d1ce4735a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...