295813 matches found
Malicious code in @years20/n8n-nodes-utils-helper-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efd1db4158ab9b9fbc01983ff03019e4938eb54329876135b5eb4a0ba927bc The package's postinstall script callback.js and its main module index.js, byte-identical to callback.js execute on both npm install and require. The...
Malicious code in @years20/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f282ccd8bb4c80e0316cecf2a9294b7f183bb2339cca52ff72508f2978f2e60 On npm install postinstall and on require/import of the package's main entry, callback.js and index.js execute id, hostname, and WSL detection, read...
MAL-2026-13910 Malicious code in @years20/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f282ccd8bb4c80e0316cecf2a9294b7f183bb2339cca52ff72508f2978f2e60 On npm install postinstall and on require/import of the package's main entry, callback.js and index.js execute id, hostname, and WSL detection, read...
Malicious code in @years19/n8n-nodes-utils-helper-j (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2e508e05396394d7bf5e459b0fd0e97016592cb83e28dbeac9a678a1a53571 package.json postinstall runs callback.js, and index.js declared main is byte-identical, so both npm install and any require of the package trigger t...
MAL-2026-13893 Malicious code in @years19/n8n-nodes-utils-helper-j (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2e508e05396394d7bf5e459b0fd0e97016592cb83e28dbeac9a678a1a53571 package.json postinstall runs callback.js, and index.js declared main is byte-identical, so both npm install and any require of the package trigger t...
MAL-2026-13894 Malicious code in @years19/n8n-nodes-utils-helper-k (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2ee90541bcb630e80a800d961efa8a534f59200943e7aa09c57f8d4972157f The package's postinstall script callback.js — duplicated byte-for-byte as index.js declared as the package main — fetches multiple tarballs mhddos,...
Malicious code in @years19/n8n-nodes-utils-helper-k (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2ee90541bcb630e80a800d961efa8a534f59200943e7aa09c57f8d4972157f The package's postinstall script callback.js — duplicated byte-for-byte as index.js declared as the package main — fetches multiple tarballs mhddos,...
Malicious code in @years19/n8n-nodes-utils-helper-l (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bead18d11dfd3ec4bd14bfa0e950bfa53a8bd30ed66225a3dec3b47b81e5aa16 The package's postinstall script and its main entrypoint index.js, byte-identical to callback.js fetch four tarballs mhddos, PyRoxy, impacket,...
MAL-2026-13895 Malicious code in @years19/n8n-nodes-utils-helper-l (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bead18d11dfd3ec4bd14bfa0e950bfa53a8bd30ed66225a3dec3b47b81e5aa16 The package's postinstall script and its main entrypoint index.js, byte-identical to callback.js fetch four tarballs mhddos, PyRoxy, impacket,...
Malicious code in @years19/n8n-nodes-utils-helper-p (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2796fa0be5e82ae475ed35463aa9f400091a3856a0fc96426e8515b012dd0e9a On npm install postinstall and on require of the main entry index.js, the package fetches multiple tarballs mhddos, pyroxy-full, impacket, multidict...
MAL-2026-13899 Malicious code in @years19/n8n-nodes-utils-helper-p (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2796fa0be5e82ae475ed35463aa9f400091a3856a0fc96426e8515b012dd0e9a On npm install postinstall and on require of the main entry index.js, the package fetches multiple tarballs mhddos, pyroxy-full, impacket, multidict...
Malicious code in @years20/n8n-nodes-utils-helper-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d61386ef6d8694ecf5f0578b5fe77156f475f76a8e97a1b2e834821cfbe0df The package presents as an n8n community-nodes helper but ships a malicious postinstall script callback.js and a byte-identical main entrypoint...
MAL-2026-13913 Malicious code in @years20/n8n-nodes-utils-helper-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d61386ef6d8694ecf5f0578b5fe77156f475f76a8e97a1b2e834821cfbe0df The package presents as an n8n community-nodes helper but ships a malicious postinstall script callback.js and a byte-identical main entrypoint...
Malicious code in @years20/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dc74cbe8090f7fd99c65cda379129055830b63fafb28c8364f3e28de5bbbb8 The package runs a hostile payload both from its declared postinstall hook node callback.js and at library load via index.js, which is byte-identical...
MAL-2026-13912 Malicious code in @years20/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dc74cbe8090f7fd99c65cda379129055830b63fafb28c8364f3e28de5bbbb8 The package runs a hostile payload both from its declared postinstall hook node callback.js and at library load via index.js, which is byte-identical...
Exploit for CVE-2026-68398
CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root...
Exploit for Deserialization of Untrusted Data in Metabase
CVE-2026-59827: Metabase Unsafe Deserialization in H2 Native Q...
CVE-2026-73263 Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path
Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfigcontent containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfigcontainsexecauth in api/src/backend/api/v1/serializers.py checked only exec...
EUVD-2026-57224
Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfigcontent containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfigcontainsexecauth in api/src/backend/api/v1/serializers.py checked only exec...
CVE-2026-73263
CVE-2026-73263 affects Prowler prior to 5.36.0. The Kubernetes provider connection test incorrectly accepted kubeconfig_content with a legacy GCP auth-provider containing config.cmd-path and config.cmd-args because kubeconfig_contains_exec_auth only checked exec blocks. When loaded via config.loa...