35348 matches found
MAL-2026-10209 Malicious code in auto-debug-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd31c11b5149d8dd2142c81cc066576dc799ba4dae4599a9569cb56256417ec package.json declares a postinstall hook node install.js that fires automatically on npm install. On Windows, install.js invokes hidden PowerShell -N...
GHSA-FJ8F-M44G-C479
creationtimestamp| type| source ---|---|--- 2026-07-11 17:11:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5tmpidk2j 2026-10-08 12:34:17+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mxehtmrzbl2i...
GHSA-GCM7-57GF-953C
creationtimestamp| type| source ---|---|--- 2026-07-11 04:41:43+00:00| seen| https://gist.github.com/alon710/5b22d6c437eabc82b89ba6fa8ccee27d...
SUSE CVE-2026-59831
GitHub CLI gh is GitHub's official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...
CVE-2026-54063
creationtimestamp| type| source ---|---|--- 2026-07-10 20:35:19+00:00| published-proof-of-concept| https://github.com/qax-os/excelize/security/advisories/GHSA-h69g-9hx6-f3v4 2026-07-10 23:37:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcwqstcx2s 2026-07-11 00:55:06+00:0...
CVE-2026-54088
creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxokhktk2v 2026-07-10 20:35:07+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm 2026-07-11...
GHSA-W7CG-WHH7-XP28
creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66...
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency wallet private keys and mnemonic seed phrases. The compromised version, @injectivelabs/[email protected] , came embedded wi...
GHSA-CX83-HXFR-M85V vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-VQ3G-6QWH-5WJ2 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-4GPX-JRQF-PGVG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-73HH-X7P5-J6FF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F2VR-9QRM-HV28 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-FX2C-JQXX-QWCV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PG56-9PGF-WM9X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RH68-CFMC-8XFW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-48X8-Q2FP-CPC8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F75R-XCG5-HGF3 vulnerabilities
Vulnerabilities for packages: chromium...