PT-2026-40630

Name of the Vulnerable Software and Affected Versions NXP moal.ko versions prior to 5.1.7.10 Description A stack buffer overflow exists in the wireless kernel module. The issue occurs within the woal init module param function via the mod para parameter. Recommendations Update to version 5.1.7.10...

Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M

A coordinated international operation involving U.S. and Chinese authorities has arrested at least 276 suspects and shut down nine scam centers used for cryptocurrency investment fraud schemes targeting Americans, resulting in millions of dollars in losses. The crackdown was led by the Dubai...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dbmate, temporal-ui-server, cert-manager, nri-nginx, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, rancher-fleet, incert, vendir, redka, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, falcoctl, hcloud, sftpgo-plugin-eventsearch,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, gitlab-rails-ce, rancher-agent, newrelic-infrastructure-agent, elastic-agent, apko-fips, argo-cd-fips, eksctl, traefik-fips, qemu-guesthelper, tigera-operator-fips, buildah-fips, kubernetes, wal-g, podman-fips, amazon-ssm-agent-fips, chartmuseum,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cloudflared-fips, gitlab-rails-ce, rancher-agent, newrelic-infrastructure-agent, elastic-agent, apko-fips, argo-cd-fips, eksctl, traefik-fips, qemu-guesthelper, tigera-operator-fips, buildah-fips, kubernetes, wal-g, podman-fips, amazon-ssm-agent-fips, chartmuseum,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, kube-logging-operator-custom-runner-fips, eksctl, polaris-fips, cluster-api-ipam-provider-in-cluster, terraform-provider-databricks-fips, nri-rabbitmq, podman-fips, git-lfs, cephcsi, fq, crossplane-provider-aws-ec2-fips, gosu, stern,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

CVE-2026-1612

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

CVE-2026-1612

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

PT-2026-29008

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143186

Malicious code in budi-ko-rusmaya npm...

Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147851

Malicious code in tehah-kalian-ko npm...

EUVD-2025-147773

Malicious code in tehah-nutay-ko npm...

MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2023-30312

Malicious code in bioql PyPI...

EUVD-2025-24764

Malicious code in bioql PyPI...

EUVD-2023-33760

Malicious code in bioql PyPI...