Malicious code in zyr-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dd19313881a0bcfd90734ce897e3134af348bce2b7447eaf4e5dbc910f432c zyr-agent ships an AI coding agent whose default 'free' provider routes chat completions to a hardcoded preview-slug endpoint at...

Malicious code in elephant-tusk-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbdcdca1756bee69586881547c9e63f555685a2e5e3daa68a9519987edd37a server.js starts an Express + WebSocket server via app.listenPORT,... with no host argument, defaulting the bind to 0.0.0.0, with fully open CORS...

MAL-2026-13445 Malicious code in elephant-tusk-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbdcdca1756bee69586881547c9e63f555685a2e5e3daa68a9519987edd37a server.js starts an Express + WebSocket server via app.listenPORT,... with no host argument, defaulting the bind to 0.0.0.0, with fully open CORS...

Malicious code in dpdgroup-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c55e6b20286d3fc29d7c3bc24932180a5e94a6fe5147393d91da212fc0dc10 package.json declares both preinstall and postinstall lifecycle hooks that run node setup.js on every npm install. setup.js reads the installer's...

MAL-2026-13444 Malicious code in dpdgroup-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c55e6b20286d3fc29d7c3bc24932180a5e94a6fe5147393d91da212fc0dc10 package.json declares both preinstall and postinstall lifecycle hooks that run node setup.js on every npm install. setup.js reads the installer's...

MAL-2026-13447 Malicious code in gpt-terminal-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefb2fc03ba2c4d843d8f15257be48318cde8e611cc3c80002f735af489a0f0a Package advertises itself as an AI chat CLI but its scripts.postinstall runs src/postinstall.js, which spawns src/implant/loader.js as a detached...

Malicious code in gpt-terminal-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefb2fc03ba2c4d843d8f15257be48318cde8e611cc3c80002f735af489a0f0a Package advertises itself as an AI chat CLI but its scripts.postinstall runs src/postinstall.js, which spawns src/implant/loader.js as a detached...

Malicious code in wormgpt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ea1156519b64249657c1495faacdb3cc5d8e250a00e0dc2f8fd4e991af61c The package's bin entries wormgpt-cli, wormgpt, deepholegpt, wgpt map to bin/victim.js, which silently spawns a detached implant on any invocation...

MAL-2026-13466 Malicious code in wormgpt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ea1156519b64249657c1495faacdb3cc5d8e250a00e0dc2f8fd4e991af61c The package's bin entries wormgpt-cli, wormgpt, deepholegpt, wgpt map to bin/victim.js, which silently spawns a detached implant on any invocation...

GHSA-47PJ-3JCM-6WHG LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

Summary The Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string "memories", "alice" becomes memories.alice and scoped reads by matching that string with LIKE '%'. Because LIKE has no notion of the . separator, a scoped search or listnamespaces also matched sibling...

LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

Summary The Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string "memories", "alice" becomes memories.alice and scoped reads by matching that string with LIKE '%'. Because LIKE has no notion of the . separator, a scoped search or listnamespaces also matched sibling...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability (CVE-2026-11714)

Summary IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability with the apiDiscovery-1.0 feature enabled. Vulnerability Details CVEID:CVE-2026-11714 DESCRIPTION: IBM WebSphere Application Server Liberty is affected by a server-side request forgery...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Log4j

Summary Multiple vulnerabilities in Apache Log4j that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verificati...

CVE-2026-64654 GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...

CVE-2026-64654

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...

EUVD-2026-54218

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...

CVE-2026-64654

GitHub CLI (gh) prior to v2.97.0 is affected by a terminal escape sequence injection across multiple gh commands due to lack of neutralization for externally supplied content (gist, API, PRs, releases, codespace, etc.). An attacker who can influence that content can embed escape sequences that ar...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

Important: Red Hat Security Advisory: yggdrasil security update

An update for yggdrasil is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch and fujirotate functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the executio...