PolinRider

PolinRider: Attore minaccioso della RPDC impianta malware in centinaia di repository GitHub Data: 2026-03-07 Ultimo aggiornamento: 2026-04-11 — vedi Aggiornamento del 10–11 aprile sotto Gravità: CRITICA — infezione attiva della supply chain in 1.950+ repository pubblici, fusione operativa...

PoC_CVEs

PoC CVEs — Proof-of-Concept-Repository-Index Ein kontinuierlich aktualisierter Index von öffentlichen GitHub-Proof-of-Concept-Repositories, die CVE-IDs zugeordnet sind. Streng zu Bildungs- und defensiven Sicherheitsforschungszwecken. Live-Suchoberfläche labs.jamessawyer.co.uk/cves/ Eine...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 Fonti dell'exploit: https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

Vulnhalla

Vulnhalla Analisi CodeQL automatizzata con classificazione LLM Per una panoramica dettagliata della ricerca e della motivazione alla base di Vulnhalla, consulta il post ufficiale del blog CyberArk Threat Research: Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhalla...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets Informazioni git-all-secrets è uno strumento in grado di: Clonare più repository GitHub pubblici/privati di un'organizzazione e scansionarli, Clonare più repository GitHub pubblici/privati di un utente che appartiene a un'organizzazione e scansionarli, Clonare un singolo repositor...

gitrob

Gitrob: Integrare l'Open Source nell'OSINT Gitrob è uno strumento per aiutare a trovare file potenzialmente sensibili caricati su repository pubblici su GitHub. Gitrob clona i repository appartenenti a un utente o a un'organizzazione fino a una profondità configurabile e scorre la cronologia dei...

CVE-2026-56443

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...

Malicious code in @workbench-stack/core (npm)

npm/@workbench-stack/core is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

Malicious code in @nebula.js/sn-layout-container (npm)

npm/@nebula.js/sn-layout-container is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @qlik/sprout-icons (npm)

npm/@qlik/sprout-icons is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Malicious code in qlik-object-conversion (npm)

npm/qlik-object-conversion is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11984 Malicious code in qlik-object-conversion (npm)

npm/qlik-object-conversion is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @nebula.js/sn-listbox (npm)

npm/@nebula.js/sn-listbox is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

Malicious code in qlik-chart-modules (npm)

npm/qlik-chart-modules is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-11806 Malicious code in @qlik/sprout-gesture (npm)

npm/@qlik/sprout-gesture is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11625 Malicious code in @onereach/regular-expressions-test (npm)

npm/@onereach/regular-expressions-test is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

Malicious code in @nebula.js/sn-nav-menu (npm)

npm/@nebula.js/sn-nav-menu is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/cp-ui (npm)

npm/@servicetitan/cp-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

MAL-2026-11904 Malicious code in @servicetitan/microfront-utils (npm)

npm/@servicetitan/microfront-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...