289 matches found
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-9M94-W2VQ-HCF9 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64436 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64435 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-7XGM-5PRM-V5GC vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-4J6X-2764-M8GH vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
CVE-2026-41053 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
CVE-2026-41052 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
GHSA-VX8H-4PRV-G744 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
CVE-2026-44939 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
GHSA-MHC6-2GFQ-XX62 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
MAL-2026-10191 Malicious code in data-harvester (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c2e2c21d9afac9277d95589962d33a09651a5b6ef7e0b3c9e07aee56af213f On first import, dataharvester/init.py decodes a base64-embedded 486KB Linux ELF, writes it to /.config/.npm-cache/snapd-network, sets mode 0777, and...
MAL-2026-10187 Malicious code in jscrambler (npm)
Supply-chain compromise of the official jscrambler npm client, a legitimate JavaScript obfuscation tool with roughly 60K downloads per month. Version 8.14.0 was published from the legitimate publisher account jscrambler / [email protected], which points to an account or CI compromise rather tha...
Malicious code in jscrambler (npm)
Supply-chain compromise of the official jscrambler npm client, a legitimate JavaScript obfuscation tool with roughly 60K downloads per month. Version 8.14.0 was published from the legitimate publisher account jscrambler / [email protected], which points to an account or CI compromise rather tha...
MAL-2026-10026 Malicious code in @wagni_bot/hyperliquid-sdk (npm)
The npm package @wagnibot/hyperliquid-sdk is a supply-chain credential stealer disguised as a Hyperliquid SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycl...