pict

PICT — Набор инструментов для сбора данных после заражения Этот набор скриптов предназначен для сбора различных данных с конечной точки, предположительно заражённой, для облегчения процесса реагирования на инциденты. Эти данные не следует считать полным судебным сбором данных, но они фиксируют...

MAL-2026-14967 Malicious code in 3layerdipstackvtd7og (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37994d3d03c7446f5f3251b1c84421b04e4cc0287ee51e7051a89fea429c79ad The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfdgka0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b1e8e507446d2e1921511d47721fa25899b90432339713bbaac218908d68b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

kwetza

Introduzione Di Chris Le Roy @brompwnie [email protected] Kwetza è uno strumento che permette di infettare un'applicazione Android esistente con un payload Meterpreter. Cosa fa? Kwetza infetta un'applicazione Android esistente con template di payload personalizzati o predefiniti per evitare ...

monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

cpanel-cve-2026-41940

🔒 cPanel CVE-2026-41940 — Kit Completo de Segurança CVE-2026-41940 / Kit completo de segurança para servidores cPanel infectados com nuclear.x86. Dois scripts — um para auditoria completa e um para limpeza automática com Imunify360. Funciona tanto com licença original quanto com licença...

UACElevator

UACElevator Elevação passiva de UAC usando infecção de DLL O binário do shellcode está no array de caracteres shellcode em UACElevator.cpp e o código bruto está em shellcode.asm...

PolinRider

PolinRider: Attore minaccioso della RPDC impianta malware in centinaia di repository GitHub Data: 2026-03-07 Ultimo aggiornamento: 2026-04-11 — vedi Aggiornamento del 10–11 aprile sotto Gravità: CRITICA — infezione attiva della supply chain in 1.950+ repository pubblici, fusione operativa...

cromos

Cromos Cromos è uno strumento per scaricare estensioni legittime dal Chrome Web Store e iniettare codice nel background dell'applicazione. Inoltre, Cromos può creare file eseguibili per forzare l'installazione tramite PowerShell , per esempio, e anche caricare file su Dropbox per ospitare file...

CVE-2023-6000

CVE-2023-6000 PoC Wie funktioniert diese Erkennungsmethode? Diese Vorlage prüft den folgenden Pfad: /wp-content/plugins/popup-builder/readme.txt Basierend auf dem angegebenen Stable Tag gilt die Version als verwundbar, wenn sie älter als 4.2.3 ist. Wie führe ich dieses Skript aus? 1. Lade Nuclei...

CVE-2021-33831

Introduzione L'applicazione viene utilizzata per tracciare le persone secondo le leggi tedesche sulle infezioni per poter tracciare le catene di infezione da Covid-19. È stato creato da un progetto studentesco chiamato iCampus ed è utilizzato non solo presso l'università di Wildau ma anche a...

Dragnmove

Dragnmove Dragnmove é uma ferramenta de pós-exploração que infecta arquivos compartilhados entre usuários para se mover de um sistema para outro. O Dragnmove pode detectar ações como soltar um arquivo na janela do navegador ou anexar um arquivo a um cliente de e-mail. Após o Dragnmove detectar a...

AI Is Learning to Write Genetic Code

This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage--a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside. Using an existing bacteriophage as an...

MAL-2026-11989 Malicious code in umadev (npm)

npm/umadev is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the worm...

Malicious code in picasso.js (npm)

npm/picasso.js is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

Malicious code in @onereach/channel-transformers (npm)

npm/@onereach/channel-transformers is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @picsart/gen-ai (npm)

npm/@picsart/gen-ai is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

MAL-2026-10986 Malicious code in comp-colors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac2a6fc7368c6b3ed1bfac9a3a9ea25e9a54ba5d980a48767c811e03fc72566 The package presents itself as a local color-palette toolkit but exports a public colors function in remote.py that POSTs to the hardcoded endpoint...

MAL-2026-10976 Malicious code in colorstack (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f3b08a41e5239924e109a14b8d91b4542bbbdddb1138a1bc6c9cfb7137b053 The package publishes as 'colorstack' with a summary advertising a color/gradient library, but installs under the import name 'newcolors' and exposes...

Malicious code in colorstack (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f3b08a41e5239924e109a14b8d91b4542bbbdddb1138a1bc6c9cfb7137b053 The package publishes as 'colorstack' with a summary advertising a color/gradient library, but installs under the import name 'newcolors' and exposes...