volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

aimmo (>=0.67.1b259, <=0.69.1), cfl-common (>=4.21.3, <=4.28.3) +5 more potentially affected by CVE-2026-15307 via django (2.2.18)

django PYPI version 2.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.67.1b259, =4.21.3, =4.21.3, =0.13.0, =2.5.7, =2.6.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

Malicious code in level-lavender-hare (npm)

Source: amazon-inspector 21e8c40a500b09d51745b48c2de5b7438410943162cd21307c32a381cb1d53b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in level-lavender-bobcat (npm)

Source: amazon-inspector 2a059bf1b158ab7631037037131b9bb21862314bd98cc50a98aac5a01eb9e104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview lavender-jr66q-bimn1-wander-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious code in lavender-munq4-1mpil-grove-project (npm)

The package lavender-munq4-1mpil-grove-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lavender-9w6q2-wpzp8-emerald-project (npm)

The package lavender-9w6q2-wpzp8-emerald-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lavender-ux121-pvzlc-xanadu-project (npm)

The package lavender-ux121-pvzlc-xanadu-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lavender-kmk4q-04c0e-night-project (npm)

The package lavender-kmk4q-04c0e-night-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lavender-smab1-0r9t7-crescent-project (npm)

The package lavender-smab1-0r9t7-crescent-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lavender-jr66q-bimn1-wander-project (npm)

The package lavender-jr66q-bimn1-wander-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in late-lavender-canid (npm)

Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in known-lavender-dog (npm)

--- Credit: OpenSSF source...

Malicious code in kestrel-zrs7t-6e2fc-lavender-project (npm)

The package kestrel-zrs7t-6e2fc-lavender-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in karma-jnaf9-xzor1-lavender-project (npm)

The package karma-jnaf9-xzor1-lavender-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in juicy-lavender-leopon (npm)

Source: amazon-inspector 6d4c4ba1e940595513e075ee2d883eba2a4623fc012a466170c86a1e76e1452c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview lavender-kmk4q-04c0e-night-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in jasper-avbkv-p4win-lavender-project (npm)

The package jasper-avbkv-p4win-lavender-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in innovative-lavender-roadrunner (npm)

Source: amazon-inspector ec72f5bfba30e96c51554845c6a26c1f998f5349a550828d2379a1dbe7b91675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inner-lavender-carp (npm)

Source: amazon-inspector e5e0ddda2f402e33cfe8ccb15f7d2c7e831f79bbcf22de964a2dd639f9f64f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...