Malicious code in gcli-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...

MSC-2026-6374

Malicious PyPI package: a fully-featured Remote Access Tool / backdoor published anonymously author 'gcli contributors', no company, no author/maintainer email; homepage github.com/gcli-control/gcli returns 404; first published 2026-07-21, 0 downloads. It implements an AES-256-GCM encrypted...

FireFox RCE by chaining small bugs

The Main Bug The main bug that made this possible was a strange behavior where 'javascript:' URLs coming from bookmarks were turning into chrome windows after a refresh occurs. This gave me my first chance at potentially injecting arbitrary chrome code, achieving that would mean I have an RCE!...