19901 matches found
MAL-2026-10914 Malicious code in my_shoaib_gem (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10910 Malicious code in mysupergoodpython (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...
MAL-2026-10833 Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ebdefd4ff4715215a3a457497ee797677c748f28b881a45b05fda760142b5e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-agpl-1-0-only (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b2260e2800619ccb9a093618b29bba531fdca6348febc8547be7d925da7b4c No a static rule matches and no traced behavioral findings were produced for this package version. With no evidence of exfiltration, install-time...
MAL-2026-10950 Malicious code in @iphouse/core (npm)
The @iphouse/core package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...
CVE-2026-63832
creationtimestamp| type| source ---|---|--- 2026-07-19 15:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz4tvv23r2q 2026-07-19 19:52:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116948386407305637 2026-07-20 16:18:29+00:00| seen|...
CVE-2026-16225
creationtimestamp| type| source ---|---|--- 2026-07-19 12:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqys4cjrqo2b...
CVE-2026-53368
creationtimestamp| type| source ---|---|--- 2026-07-19 11:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyppf7xsd2x...
CVE-2026-16213
creationtimestamp| type| source ---|---|--- 2026-07-19 08:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqydka3b5q2i...
CVE-2026-16205
creationtimestamp| type| source ---|---|--- 2026-07-19 04:11:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxvxeiucc2b...
PT-2026-61420
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the device removal path of the ISCI driver. The completion tasklet is initialized during isci host alloc and scheduled via MSI-X and legacy interrupt...
CVE-2026-12228
creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...
Malicious code in axios-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d01cf6414d6896b4f60ac6e2ecc238d33c049b6f6f5add44bd7700de32a906 The package presents itself as a drop-in replacement for axios identical name shape, README, and API but adds a top-level import of a separate npm...
CVE-2026-8505
creationtimestamp| type| source ---|---|--- 2026-07-17 20:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulivjdmi24 2026-07-17 22:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mququiyq3u2s 2026-07-18 10:30:29+00:00| seen|...
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution RCE vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 Critical, results from the...
CVE-2026-38158
creationtimestamp| type| source ---|---|--- 2026-07-17 15:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqtzxeo5v72v...
CVE-2026-15395
creationtimestamp| type| source ---|---|--- 2026-07-17 12:12:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqtpwagzup2v 2026-07-17 12:12:46+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116935253395484489...