MAL-2026-6563 Malicious code in @thone33/analytics-injector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcef0ea3fd19d9b238a097485faaf7db52d5aa4363653fd7fb29f4c0ff251f92 Package presents itself as an 'analytics injection helper' with a no-op track export, but its exported activate function fetches a JavaScript file fr...

Malicious code in @thone33/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05561d1a31165dab72c5090437ccfa7a85035a2b4fdf6a646eca59b62dd87120 @thone33/core-utils 1.0.4 is a loader stub. Its main entry index.js imports activate from the same-author dependency @thone33/analytics-injector and...

MAL-2026-6564 Malicious code in @thone33/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05561d1a31165dab72c5090437ccfa7a85035a2b4fdf6a646eca59b62dd87120 @thone33/core-utils 1.0.4 is a loader stub. Its main entry index.js imports activate from the same-author dependency @thone33/analytics-injector and...

Malicious code in vite-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3397d754ffeb3726496769b2f159ce8596b2233b5875afa8f7fbca29ed0fd The package presents itself as a Vite utility library but its only export, loadFilbetScriptSilently, creates a element whose src is hardcoded to...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: rustup, deno, sccache, sqlx, sdp-k8s-injector, vector, rpm-sequoia...

CVE-2026-41681 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

GHSA-GHM9-CR32-G9QJ vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

GHSA-8C75-8MHR-P7R9 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

GHSA-PQF5-4PQQ-29F5 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: sccache, deno, vector, valkey-ldap, bootc, typst, sqlx, rpm-sequoia, guestproxyagent, sdp-k8s-injector, sentry-cli, ztunnel-fips, komodo, rustls-openssl-client, rustup...

OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR

Summary A flaw in the Java agent injection path allows a local attacker controlling a Java workload to overwrite arbitrary host files when Java injection is enabled and OBI is running with elevated privileges. The injector trusted TMPDIR from the target process and used unsafe file creation...

Metasploit Wrap-Up 03/27/2026

Better NTLM Relaying Functionality This week’s release brings an improvement to the SMB NTLM relay server. In the past, it’s support has been expanded with modules for relaying to HTTP ESC8, MSSQL and LDAP while still receiving connections over the humble SMB service. Prior to this release, clien...

CVE-2026-2809

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

CVE-2026-2809

CVE-2026-2809 concerns Netskope’s Endpoint DLP Driver DLL Injector on Windows. Reported as a potential integer overflow in the DLL Injector, exploiting it may cause a local BSOD and denial of service, with exploitation requiring the Endpoint DLP module to be enabled in the client configuration. C...

CVE-2026-2809 Endpoint DLP Driver DLL

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...