Malicious Package

Overview kartykgithub-ph-b is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview xcvrenzcompany is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview apl-rive-renderer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview kartykgithub-ph-e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview luoxy-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview prastzyy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview @bluewin/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview friendly-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview niksinnkatalapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview danz-bails is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview alexa-cybertron-team-code-review-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview @erlanzz/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview figma-to-apl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ai-workshop-radio-lambda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview gogets.dev/btreex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview shortneer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Debinject

Debinject Внедрение вредоносного кода в .deb-пакеты РАЗРАБОТЧИКИ Alisson Moretto | Twitter: @UndeadSec GitHub: @UndeadSec ВИДЕО ДЕМОНСТРАЦИЯ КЛОНИРОВАНИЕ git clone https://github.com/UndeadSec/Debinject.git ЗАПУСК cd Debinject python debinject.py ТРЕБОВАНИЯ python 2.x dpkg dpkg-deb metasploit ОТК...

CVE-2024-38526

CVE-2024-38526 - Polyfill Scanner: x 대량 URL 스캐너 polyfill.io CDN은 이전에 악성 코드를 제공하도록 손상되었으나, 이제 pdoc 14.5.1의 최신 수정으로 보안이 강화되었습니다. 개요 잠재적 문제 감지 반복 작업을 쉽게 자동화 기능 높은 신뢰도의 경고 : 신뢰할 수 없는 도메인의 스크립트를 감지합니다. Polyfill 취약점 탐지 : polyfill.io의 잠재적 문제를 식별합니다. URL 스캐닝 : 제공된 웹 페이지에서 스크립트 URL을 추출하고 분석합니다. 로깅 및 보고 :...

GuardModel

GuardModel YAML 한 줄로 파이프라인의 악성 AI 모델을 차단하세요. GuardModel은 CI/CD 파이프라인에서 ML 모델 파일을 자동으로 스캔하여 악성 코드, 취약점, 보안 위험을 탐지하는 GitHub Action입니다. pickle 역직렬화 공격, 포함된 악성코드, 알려진 CVE를 탐지하여 위험한 모델이 프로덕션에 도달하기 전에 차단합니다. 빠른 시작 워크플로우에 추가하세요: name: GuardModel Security Scan on: push, pullrequest jobs: scan: runs-on:...

MAL-2026-17421 Malicious code in spo365-graph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea8dd7600717964f4ca8f8b1134f867f4bf69f1538243d5c7da752eefed99fe1 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then...