8129 matches found
Malicious code in deployer-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da11ad369455db7b2449adf6bc2da43741e5ae36ae35188889dab9cbd7f221b8 The package deployer-kit was found to contain malicious code...
MAL-2026-2754 Malicious code in deployer-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da11ad369455db7b2449adf6bc2da43741e5ae36ae35188889dab9cbd7f221b8 The package deployer-kit was found to contain malicious code...
Malicious code in ccip-starter-kit-hardhat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18950b48cb8b769d2cda9645f7c64f05698aad343186a22e3a84af7662856c39 The package ccip-starter-kit-hardhat was found to contain malicious code...
MAL-2026-2739 Malicious code in ccip-starter-kit-hardhat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18950b48cb8b769d2cda9645f7c64f05698aad343186a22e3a84af7662856c39 The package ccip-starter-kit-hardhat was found to contain malicious code...
Malicious code in @appleseed-apple/ac-sass-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c442c9bf5d1d38099a4ea05b85daf5b071a2d9e6e87dc72d030ecd4ca5404 The package @appleseed-apple/ac-sass-kit was found to contain malicious code...
MAL-2026-2709 Malicious code in @appleseed-apple/ac-sass-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c442c9bf5d1d38099a4ea05b85daf5b071a2d9e6e87dc72d030ecd4ca5404 The package @appleseed-apple/ac-sass-kit was found to contain malicious code...
Important: .NET 9.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime...
.NET 9.0 security update
9.0.116-1.0.1 - Add support for Oracle Linux 9.0.116-1 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163389...
CVE-2026-27258
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
org.apache.avro/avro: Apache Avro Java SDK: Code injection on Java generated code
A code injection flaw has been discovered in Apache Avro. This vulnerability manifests when generating specific records from untrusted Avro schemas...
coruna-exploit-kit-analysis
Coruna iOS Exploit Kit — Reverse Engineering Analysis Def...
PT-2026-32765
DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...
APSB26-41 : Security update available for Adobe DNG Software Development Kit (SDK)
Adobe has released an update for the Adobe DNG Software Development Kit SDK for Windows and macOS. This update resolves important vulnerabilities that could lead to application denial-of-service and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in...
[SECURITY] Fedora 44 Update: dtk6gui-6.7.32-5.fc44
Deepin Tool Kit DtkGui is the development graphical user interface of all C++/Qt Developer work on Deepin...
CVE-2026-39479
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...
Malicious code in @b2b-portal/kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5c1b32159c7e6dc9c07e663c7f8cf3b3ee24450a33289a1a79589c69906eed The package @b2b-portal/kit was found to contain malicious code. Source: ghsa-malware 20de22d7080860e2c01f3de58d2809af28e543302e49545749666efd4956c23...
Malicious Package
Overview @b2b-portal/kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-2577 Malicious code in @b2b-portal/kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5c1b32159c7e6dc9c07e663c7f8cf3b3ee24450a33289a1a79589c69906eed The package @b2b-portal/kit was found to contain malicious code. Source: ghsa-malware 20de22d7080860e2c01f3de58d2809af28e543302e49545749666efd4956c23...
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
The U.S. Federal Bureau of Investigation FBI, in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-the-shelf toolkit called W3LL to steal thousands of victims' account credentials and attempt more...
