MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...

MAL-2026-10911 Malicious code in mysuperlicense (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10910 Malicious code in mysupergoodpython (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10909 Malicious code in ibreak (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hello-world-test-mh2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a70ea37beb115e4464b5e9ebaf58986f4cd75434257163f4ddb82f5624ea13 setup.py decodes a base64 string and passes the result to exec at install time. The decoded payload is a single print statement that emits a benign...

MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...

Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...

MAL-2026-10907 Malicious code in hello-world-test-mh2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a70ea37beb115e4464b5e9ebaf58986f4cd75434257163f4ddb82f5624ea13 setup.py decodes a base64 string and passes the result to exec at install time. The decoded payload is a single print statement that emits a benign...

MAL-2026-10867 Malicious code in vantrala (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a8ea52e1b49fea90687ad77b199bd1ca8eda6666ce05c55e98e52c6da59ec The package presents itself as a 'Python wrapper for the bundled kimichat runtime' but the bundled 32MB ELF at src/vantrala/resources/kimichat is...

MAL-2026-10864 Malicious code in kimichat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093 The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10858 Malicious code in @gocortexio/npmgremlinbox-typosquat-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 549eafb217d88c4caf074d8a74e4dc3c2e49f0fc7fbeccb2983eb72bf05fae68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10862 Malicious code in @gocortexio/npmgremlinbox-wxwindows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1640e484da8cbebf69e53491713558d561edf9b388275a3ae5e33ce967b4292c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10847 Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 112e0a80917ce922de20557d22ea75375b07d627784966638b99e1d4ad46a355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10835 Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e17110b408450f798af7801913c4ae1a286a4d81496e15d1f79a94426d7ed3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10833 Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ebdefd4ff4715215a3a457497ee797677c748f28b881a45b05fda760142b5e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10856 Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fac92ee65337be0a32cfe771e1a471827b35d08304b02a76ae80b479fb7cac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10855 Malicious code in @gocortexio/npmgremlinbox-typosquat-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8aaa0011af74cc2062dc437586a03dd93fe0913864509c354c88523e31efdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10846 Malicious code in @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269cfa8afaaef9836a6f0d2f53e1a6e72cfa7a3c466c4831bb5c7269e7d2bf73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...