MAL-2026-4441 Malicious code in @shadanai/openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e2f02ab1bb3d99de1787ed7d69f1df97bd3b2d7c18cc8ba4e5f8688f649ce9 On npm install, scripts/postinstall.mjs performs several installer-harm actions. 1 Backdoor: writes /.openclaw/openclaw.json configuring a local...

CVE-2025-65957

Core Bot Is an Open Source discord bot made for maple hospital servers. Prior to commit dffe050, the API keys SUPABASEAPIKEY, TOKEN are loaded using environment variables, but there are cases in code error handling, summaries, webhooks where configuration summaries may inadvertently leak sensitiv...

Yuanbei Driving Exam Baidu Cloud BOS has credential leakage vulnerability

Yuanbei Driving Test is an internet and mobile internet product developed by Nanjing Yuanbei Information Technology Co. Ltd. specifically for driving beginners. Baidu cloud bos is a cloud storage service based on Baidu cloud system. A credential leakage vulnerability exists in Baidu Cloud bos of...