OreNPMGuard

OreNPMGuard - Escáner de Paquetes Shai-Hulud Versión 2.0.0 - Detección Shai-Hulud 2.0 y Sistema de Prevención Mejorado Una herramienta de seguridad para detectar paquetes npm comprometidos en los ataques a la cadena de suministro Shai-Hulud septiembre de 2025 original y Shai-Hulud 2.0 noviembre d...

vet

Inicio Rápido • Documentación • Comunidad !NOTE vet soporta un modo especial para Agent Skills. Ejecuta vet scan --agent-skill para escanear un Agent Skill alojado en un repositorio de GitHub. ¿Por qué vet? El 70–90 % del software moderno es código abierto — ¿cómo sabes que es seguro? Las...

CVE-2026-104853

A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...

pmg

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

Malicious Package

Overview @fazzcodestudio/wa-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview spo365-graph is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @celestial-community/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview ai-workshop-radio-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview illusion-datalab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @developmentyora/baileyss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview okra-cloud-cdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview live-detection-dashboard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

go-mal-pkgs

go-mal-pkgs Una herramienta de seguridad para detectar paquetes Go maliciosos verificando los checksums en go.sum contra el código fuente original, evitando el caché del proxy de módulos de Go. Resumen Esta herramienta ayuda a proteger contra ataques a la cadena de suministro que explotan el cach...

CVE-2021-32804

CVE-2021-32804 Repositorio para construir el entorno Docker utilizado en el blog de yamory 「Vulnerabilidad de path traversal en node-tar que también afecta a npm CVE-2021-32804」. Configuración del entorno docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Reproducción de la...

Malicious Package

Overview @bb1ptest23/test-paket is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview api-typings is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview @consts/links is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @bb1ptest23/test-paket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88718be23e6bf753453adc1110580e87b675e7881b945d419746afe4bebcfa5e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ossf-package-analysis...

EUVD-2026-83974

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:4060-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4060-1 advisory. Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue...