CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

Malicious code in facewareretargeter (PyPI)

Source: kam193 3d3c954fb5fd6d1ddfc1d5e22129468136fb43fe78c6d69f0df134925b6a8b08 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in hijiko-pilaka (PyPI)

Source: kam193 1ca95d97923a23c0fd145b6cc4def7910fa36f1b4c4e5e3cf40e5bab8c9e250d The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

are-you-get-tanstack-attack

TanStack Router CVE Scanner A security scanning tool to detect the TanStack Router CVE | TanStack Router GHSA in your projects. Overview This tool scans your codebase for indicators of the TanStack Router vulnerability CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx, which affects specific versions of...

CVE-2026-33634-Scanner

CVE-2026-33634-Scanner Automated scanner for detecting indicators of compromise IOCs associated with the TeamPCP supply chain attack CVE-2026-33634 📋 Table of Contents Overview Vulnerability Features Detected IOCs Installation Usage Examples Report Format Project Structure System Requirements...

MAL-2026-18112 Malicious code in hijok-lampam (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8944d571e7af6e23f5c6c984859f38e1336fcfeee595dfabca635477cfe38045 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18113 Malicious code in jiklpo-tsunari-kay (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82ef4d01da7de20aa2e477bb07e1daa97855cdf33d186579da5cf148e3d4be0e The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18111 Malicious code in hijiko-pilaka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ca95d97923a23c0fd145b6cc4def7910fa36f1b4c4e5e3cf40e5bab8c9e250d The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18110 Malicious code in facewareretargeter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd41ab1e378f4c7d767acb2b9e9199a4276e125d6e84aba3627bf37c879f24 facewareretargeter 9.9.9 ships a 2-line stub module and a setup.py whose installrequires declares a single dependency, tracer-batch-stream-chain,...

Malicious code in semmver (PyPI)

Source: amazon-inspector 8de323d5976a26f2d9540680d1706a53bcb3ca743409821e83f7a2f1b60e8594 The package is a typosquat-style empty stub semmver/init.py contains only version = '1.0.0' whose only functional code is in setup.py. At pip install time, setup.py calls urllib.request.urlretrieve to downlo...

MAL-2026-18102 Malicious code in semveer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86237b957fd063a0e1fcf250a510b2fb9566ab48652e56fe787d2e1a02e351a The sdist for 'semveer' ships an inert module semveer/init.py contains only a version stub and places all runtime behavior inside setup.py's install...

Malicious code in semmver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de323d5976a26f2d9540680d1706a53bcb3ca743409821e83f7a2f1b60e8594 The package is a typosquat-style empty stub semmver/init.py contains only version = '1.0.0' whose only functional code is in setup.py. At pip install...

MAL-2026-18101 Malicious code in semmver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de323d5976a26f2d9540680d1706a53bcb3ca743409821e83f7a2f1b60e8594 The package is a typosquat-style empty stub semmver/init.py contains only version = '1.0.0' whose only functional code is in setup.py. At pip install...

Malicious code in semverr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110e0a64dd80654ca98caa5e291499d158a39eb66c1d35efe896a42095c85118 semverr is a near-empty package a one-line version whose name resembles the popular semver library. Its setup.py runs at install time invoked by pip...

MAL-2026-18103 Malicious code in semverr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110e0a64dd80654ca98caa5e291499d158a39eb66c1d35efe896a42095c85118 semverr is a near-empty package a one-line version whose name resembles the popular semver library. Its setup.py runs at install time invoked by pip...

Malicious code in unicode-title-normalizer (npm)

[email protected] was published to npm on 2026-10-19 at 14:50:39 UTC by the account bluntyblunks, about one minute after npm's staged-publish placeholder 0.0.0-stage. The tarball has three files. index.js exports a function that returns the string "hello", and README.md is an unedite...

MAL-2026-18100 Malicious code in unicode-title-normalizer (npm)

[email protected] was published to npm on 2026-10-19 at 14:50:39 UTC by the account bluntyblunks, about one minute after npm's staged-publish placeholder 0.0.0-stage. The tarball has three files. index.js exports a function that returns the string "hello", and README.md is an unedite...

Malicious code in @platform-services/hrm-mfe-core (npm)

Source: ossf-package-analysis c7552efe145088950a0df7a5c63da92a309a040fba2062a4d32bb59cadc9ec47 The OpenSSF Package Analysis project identified '@platform-services/hrm-mfe-core' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

CVE-2026-113403

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server...

EUVD-2026-104815

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server...