MAL-2026-10875 Malicious code in @dxcl/http-common-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10873 Malicious code in @dxcl/customer-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10874 Malicious code in @dxcl/fund-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10872 Malicious code in @dxcl/account-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10871 Malicious code in @azure-lab-services/ml-ts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10870 Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10914 Malicious code in my_shoaib_gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10913 Malicious code in ike-artifactory-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10911 Malicious code in mysuperlicense (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10910 Malicious code in mysupergoodpython (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10909 Malicious code in ibreak (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10907 Malicious code in hello-world-test-mh2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10867 Malicious code in vantrala (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e598f1a12fbd4aed3a98f1942d98fb5ca47182206f0090ac57d7927010061b37 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10864 Malicious code in kimichat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

MAL-2026-10847 Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 112e0a80917ce922de20557d22ea75375b07d627784966638b99e1d4ad46a355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10856 Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fac92ee65337be0a32cfe771e1a471827b35d08304b02a76ae80b479fb7cac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10835 Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e17110b408450f798af7801913c4ae1a286a4d81496e15d1f79a94426d7ed3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...