Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f4885b543da795140d0ac9c44423c6ecadf74c744c1f322f9d1a5263fe4f2 No static or traced behavioral signals of supply-chain attack were observed in this package. There is no evidence of install-time or import-time code...

CVE-2026-58177

creationtimestamp| type| source ---|---|--- 2026-08-01 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryigttluu2r...

CVE-2026-51282

creationtimestamp| type| source ---|---|--- 2026-08-01 03:01:11+00:00| seen| https://gist.github.com/programmervuln/70eec3d7f61ec0f52364baaf8433ea02...

CVE-2026-51280

creationtimestamp| type| source ---|---|--- 2026-08-01 02:48:41+00:00| seen| https://gist.github.com/programmervuln/7c5c38470d3414ac9657e7b59986f137...

CVE-2026-56060

creationtimestamp| type| source ---|---|--- 2026-08-01 02:44:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mryh5qenzg2t...

EUVD-2026-51669

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

CVE-2026-57319

creationtimestamp| type| source ---|---|--- 2026-07-31 23:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mry53uenmt27...

GHSA-VVP7-H4FJ-M28W

creationtimestamp| type| source ---|---|--- 2026-07-31 23:31:28+00:00| seen| https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f 2026-08-01 00:00:16+00:00| seen| https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f...

CVE-2026-9044

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

CVE-2026-45377

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the normal downloadyourdata flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without...

CVE-2026-57619

creationtimestamp| type| source ---|---|--- 2026-07-31 22:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxzqnc6r52n...

CVE-2026-9044

Technical details about CVE-2026-9044 are not publicly available in the provided documents; monitor for updates.

CVE-2026-9044 Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

CVE-2026-62959

creationtimestamp| type| source ---|---|--- 2026-07-31 21:55:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/duejp3dwq35n3 2026-08-01 00:15:24+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62959...

CVE-2026-56066

creationtimestamp| type| source ---|---|--- 2026-07-31 21:44:39+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxwfbprgd26...

CVE-2026-53551

creationtimestamp| type| source ---|---|--- 2026-07-31 21:31:45+00:00| seen| https://gist.github.com/alon710/0f09a6f6c7f9c253322faa348755ead8 2026-07-31 22:35:11+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-qj55-47fp-p62j 2026-08-01 00:15:08+00:00...

CVE-2026-50986

PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...

GHSA-3WHF-VGF2-9W6G

creationtimestamp| type| source ---|---|--- 2026-07-31 20:31:22+00:00| seen| https://gist.github.com/alon710/124f7bf887e5079fb15a66958a9543ef...

CVE-2025-69933

creationtimestamp| type| source ---|---|--- 2026-07-31 20:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxqvxseu72l...

CVE-2026-52856

creationtimestamp| type| source ---|---|--- 2026-07-31 19:51:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxq3akldl23 2026-08-02 07:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3fwwqe6w2e...