MAL-2026-18305 Malicious code in @s4yhiitestpoc/r2-https-dualuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8987a5408de1fd879005877185e31a5a0931162318ade2fc1a4e6ce6592c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/r2-https-dualuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8987a5408de1fd879005877185e31a5a0931162318ade2fc1a4e6ce6592c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @s4yhiitestpoc/scan-https-dualuse-e

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/scan-https-d

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @s4yhiitestpoc/scan-https-dualuse-e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69b9998deea152d8088db89469ab4f8fa468d68e8cb923b25c7e91f8facf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18309 Malicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69b9998deea152d8088db89469ab4f8fa468d68e8cb923b25c7e91f8facf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @s4yhiitestpoc/r2-https-dualuse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malware in @s4yhiitestpoc/r2-https-dualuse

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/r2-https-b

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-urllib3 security update

1.26.5-8.2 - CVE-2026-97687 python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override Resolves: RHEL-282326 1.26.5-8.1 - CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282267...

PT-2026-123453

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

NLnet Labs Routinator improper exception handling vulnerability

Versions prior to NLnet Labs Routinator 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises because newly obtained TA certificates obtained via HTTPS are stored in cache without verification; as a result, even if verification fails, known valid TA certificates m...

ALSA-2026:90494 Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Malicious code in @generic-means/ing-feat-scanner-libs (npm)

Source: amazon-inspector 7053eaf141232704108519a3b3e7a0f1197d9eaabfa9fd3f4ff56ae9f753d763 package.json declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.3.tgz rather than a registry version range or a git ref pinned to ...

CVE-2026-116166 SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting

SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port keeps serving full API access over plain HTTP alongside HTTPS. Network-adjacent attackers can sniff the cleartext login flow and session cookie, which lacks the Secure attribute...

CVE-2026-116166 SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting

SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port keeps serving full API access over plain HTTP alongside HTTPS. Network-adjacent attackers can sniff the cleartext login flow and session cookie, which lacks the Secure attribute...

CVE-2026-116166

The SiYuan note-taking application (versions 3.6.0 before 3.8.7 ) is vulnerable to cleartext transmission of sensitive information (CWE-319). Although the application accepts and persists the networkServeTLS setting, it fails to enforce it, allowing the kernel port to serve full API access over p...

Node.js 26.5.0 HTTPS Agent Session Reuse Verification Bypass

Node.js versions before 22.23.2, 24.18.1, and 26.5.1 contain an HTTPS Agent TLS session reuse flaw that can skip hostname verification across identity policies. This offline checker assesses supplied version evidence and does not test exploitability. https://packetstorm.news/download/237495...