Malicious Package

Overview zrgvp2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zlamhttpalt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview zrgvqf269 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zlamnewcalok is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview zwcalx12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zjpage100 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zwtd104 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zztargettest18587 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-48022

creationtimestamp| type| source ---|---|--- 2026-07-18 00:39:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquzovanfa2g...

CVE-2026-56740

creationtimestamp| type| source ---|---|--- 2026-07-18 00:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquytzuy6y2i 2026-07-18 05:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqviazwau42g 2026-07-18 09:09:13+00:00| seen|...

CVE-2026-49485

creationtimestamp| type| source ---|---|--- 2026-07-18 00:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquy4oxscf2i 2026-07-18 05:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvibgrkxm2g...

PT-2026-60979

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate path of the file src/tools/builtin/path utils.rs of the component write file. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

CVE-2026-16077: Improper Link Resolution Before File Access

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...

CVE-2026-16130: Improper Link Resolution Before File Access

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validatepath of the file src/tools/builtin/pathutils.rs of the component writefile. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

PT-2026-60922

Name of the Vulnerable Software and Affected Versions AstrBot versions prior to 4.25.6 Description An issue exists in the Filesystem Computer-Use Tool within the normalize rw path function of the astrbot/core/tools/computer tools/fs.py file. A local attacker can perform a manipulation that result...

CVE-2026-54243

creationtimestamp| type| source ---|---|--- 2026-07-17 23:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwyzxvhl2b...

Malicious Package

Overview axios-native is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-14499

creationtimestamp| type| source ---|---|--- 2026-07-17 21:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqpmiqc62q 2026-07-18 19:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6ili462d 2026-07-21 10:37:07+00:00| seen|...

CVE-2026-13446

creationtimestamp| type| source ---|---|--- 2026-07-17 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquojgqxle2i 2026-07-18 09:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqvvo465ey2n 2026-07-18 09:00:38+00:00| seen|...

CVE-2026-63030

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-17 22:19:07+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mqursxmdqy2o 2026-07-17 22:53:06+00:00| seen|...