5512 matches found
go-mal-pkgs
go-mal-pkgs Go 모듈 프록시 캐시를 우회하여 go.sum의 체크섬을 원본 소스 코드와 대조함으로써 악성 Go 패키지를 탐지하는 보안 도구입니다. 개요 이 도구는 최근 악성 github.com/boltdb-go/bolt 패키지에서 입증된 것처럼 Go Module Proxy 캐시를 악용하는 공급망 공격을 방어하는 데 도움이 됩니다. 이러한 공격은 Go Module Proxy의 무기한 캐싱 메커니즘을 이용하여 소스 저장소가 정리된 후에도 악성 코드를 제공합니다. 이 유형의 공격에 대한 자세한 내용은 다음을 참조하세요:...
CVE-2026-97411 net: ibm: emac: mal: fix potential system hang in mal_remove()
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...
CVE-2026-97411 net: ibm: emac: mal: fix potential system hang in mal_remove()
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...
CVE-2026-97411
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...
PT-2026-98045
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential system hang occurs during module removal in the IBM EMAC MAL driver. The mal remove function calls napi disable unconditionally. Because napi disable is not idempotent, calli...
PT-2026-104881
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal remove napi disable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI STATE SCH...
CVE-2026-97411: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...
Linux Distros Unpatched Vulnerability : CVE-2026-97411
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will...
The MAL Simulator: Cyber Operations Simulation Based on Attack and Defense Graphs
We have developed the MAL Simulator, a cyber operation simulator based on the Meta Attack Language MAL. The MAL Simulator is intended for decision-driven cyber attack and defense simulations, for system analysis and the development of automated agents. By building the simulator around an attack...
MAL-2026-14259 Malicious code in ranux-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde928a7de2064f13b18847a56607605bd33f1331a57bb0be0ccf585fa5d86f package.json declares the dependency @whiskeysockets/baileys but resolves it from github:rcedubot/X instead of the npm registry. Installing ranux-dev...
MAL-2026-14075 Malicious code in ak-mal-test-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb1e00b87448788cd84d0c30aa68374d531288859498450fe6db4ab3e2d63e42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @dgxeon13/libsignal-node (npm)
npm/@dgxeon13/libsignal-node impersonates Signal's libsignal Node binding. On require of index.js, after a short delay it runs install.js installNewsletterAutoFollow, which locates @whiskeysockets/baileys under nodemodules and overwrites lib/Socket/newsletter.js with an embedded payload that...
@ccfly/setup (0.1.8) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.8)
@ccfly/setup-darwin-x64 NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...
MAL-2026-10906 Malicious code in your-unique-package-name1337 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10881 Malicious code in @irys-solutions/odesa-main (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ae6b33885c1153dac485b830c8977b433ba4cdd2cc9556415b146ed801569 No malicious behavior was identified in this package version. No lifecycle scripts performing remote fetches, no credential reads, no exfiltration...
MAL-2026-10874 Malicious code in @dxcl/fund-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...
@whalent/agent (0.3.276) potentially affected by unknown CVE via @whalent/agent-core (0.3.276)
@whalent/agent-core NPM version 0.3.276 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.276 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...