36492 matches found
Malicious code in @antv/g-plugin-zdog-svg-renderer (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/g-plugin-mobile-interaction (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/g-plugin-canvas-picker (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antstackio/shelbysam (npm)
Source: amazon-inspector 9b11f3b36cf4d67018deed9546e206b16b8fa148a32c0802a5e8c51998f1c17e The package @antstackio/shelbysam was found to contain malicious code. Source: google-open-source-security 1e5b33ede3ba1777afcff68cc86bdbf5fd49e658ebdb08d925efff854f4fedd4 This package was compromised by the...
Malicious code in @antv/f2-wordcloud (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/data-set (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: ipfs-cluster, ipfs-cluster-fips, k3s, rke2-runtime-fips, rke2-runtime, spegel, kubo, spegel-fips...
GHSA-P6PH-3JX2-3337
creationtimestamp| type| source ---|---|--- 2026-07-25 16:31:29+00:00| seen| https://gist.github.com/alon710/7ac48e75205a16d278d7edd78b6790dd 2026-10-12 18:55:14+00:00| seen| https://infosec.exchange/users/cve/statuses/117429457016187919...
CGA-6W2Q-49J7-CV62
Bulletin has no description...
GHSA-Q53C-4PRM-W95Q
creationtimestamp| type| source ---|---|--- 2026-07-25 11:31:34+00:00| seen| https://gist.github.com/alon710/7d82b3a29a466133e3b991f0cb56fd86...
GHSA-JVXP-QMX7-GJPX
creationtimestamp| type| source ---|---|--- 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...
GHSA-8Q49-2H5H-434X
creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...
openSUSE 16 Security Update : gh (openSUSE-SU-2026:21432-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21432-1 advisory. Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version...
CVE-2026-62323
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
GHSA-HVRM-45R6-MJFJ vulnerabilities
Vulnerabilities for packages: langfuse...
GO-2026-5471 Kratos has a Confused Deputy issue in github.com/go-kratos/kratos
Kratos has a Confused Deputy issue in github.com/go-kratos/kratos...
GO-2026-5543 Go-ntlmssp NTLM challenges can panic on malformed payloads in github.com/Azure/go-ntlmssp
Go-ntlmssp NTLM challenges can panic on malformed payloads in github.com/Azure/go-ntlmssp...
CVE-2026-61632
creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:21+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-9xwg-3r6f-jcx2...