34847 matches found
MAL-2026-16246 Malicious code in kartyk-github-token-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf7fd25b60cd680892113ab7de697ebe897542c013c8c4a977bb4852a593619 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16245 Malicious code in kartyk-github-single-ver-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc583cefb03bc649c96d2e8b48cc2bd5d73d8f6c489ded9b46c217ba1f212ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kartyk-github-single-ver-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc583cefb03bc649c96d2e8b48cc2bd5d73d8f6c489ded9b46c217ba1f212ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kartyk-github-token-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf7fd25b60cd680892113ab7de697ebe897542c013c8c4a977bb4852a593619 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kartyk-github-oidc-test-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0bc4570b5c41bc6a589bf16daea1a90f52e57b878fe6219afb1102ec24c535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16244 Malicious code in kartyk-github-oidc-test-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0bc4570b5c41bc6a589bf16daea1a90f52e57b878fe6219afb1102ec24c535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-61594
creationtimestamp| type| source ---|---|--- 2026-09-16 22:31:42+00:00| seen| https://gist.github.com/alon710/adad858617714b6e11a8b77f97f82b9a 2026-09-17 00:00:37+00:00| seen| https://gist.github.com/alon710/adad858617714b6e11a8b77f97f82b9a 2026-09-17 00:09:20+00:00| seen|...
GHSA-XHHM-F6HP-2QWJ
creationtimestamp| type| source ---|---|--- 2026-09-16 22:31:42+00:00| seen| https://gist.github.com/alon710/adad858617714b6e11a8b77f97f82b9a 2026-09-17 00:00:37+00:00| seen| https://gist.github.com/alon710/adad858617714b6e11a8b77f97f82b9a...
CVE-2026-85469
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream Noelware/docker-manifest-action used in the release workflow, which is pinned to a mutable branch. This allows the attacker to inject arbitrary code, leading to the exfiltration of sensitive...
Malicious Package
Overview kartyk-github-token-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview kartyk-github-oidc-test-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview kartyk-github-single-ver-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Exploit for Injection in Dkfz Nnu-Net
Agentic workflow injection: fixtures and a coverage comparison...
CVE-2026-92773
Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining...
CVE-2026-85469 Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream Noelware/docker-manifest-action used in the release workflow, which is pinned to a mutable branch. This allows the attacker to inject arbitrary code, leading to the exfiltration of sensitive...
CVE-2026-85469
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream Noelware/docker-manifest-action used in the release workflow, which is pinned to a mutable branch. This allows the attacker to inject arbitrary code, leading to the exfiltration of sensitive...
CVE-2026-86865
creationtimestamp| type| source ---|---|--- 2026-09-16 21:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvnzuc4xxg2o 2026-09-17 00:01:47+00:00| seen| https://gist.github.com/ichintu/0a4ecacd8285eafd21cb342d1792e68e...
CVE-2026-92802
kan (kanbn/kan) through version 0.6.0 contains an authorization bypass in the GitHub project import endpoint. The root cause is a failure to properly validate board creation permissions in the importProjects mutation , allowing guests to create boards despite lacking the board:create permission. ...