Malicious code in desmosisfire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0679b40ac71c7b8ce0dc0557c8779a85ad10fac03ff678128ec4aa687c5e243 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in classroomhomework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64edbbd8d1e23d937c4697de257a67981be2ebb2934a4280424a86f4af7028f The package's index.html impersonates Google Classroom title, gstatic favicon, hardcoded student email [email protected], decoy schedule/gradebook...

Malicious code in desmosschoolwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9575a8846e102604d72f61d91f37c559e58d0fca4c117008257d096afc2a2acb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in sonsonsahur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56e98f205b0c56ba4ee1948a10f1aaaccbbad4556e01569bfab9945ec8ad7e2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tungtunggod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfc083fc4a77544ba957b1c1d771998929fc71453f905f6d9c474e2bd3fb51f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tungtungisgoated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649ce9c915a5834ac0743a8f47377d31c293de34fbe40581c2f7ce3ca56c8da The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in desmosclasswork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d435d8cefda2b58ca65ad06ffac8521a26ccb991dd4828dd479e64ddb38bb865 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in schoollesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c019b72671bb34207fbc587803e391f42f2fd3148c3ac941d9a8cfc8468a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in iwantaburger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660011f86e2c92f83c584ac25343cc8d8da3a4242286e751d9e8bc0bd8510a68 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in iamhungryrn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462bbc47c25a6f0d3de4221795fe1a35ea55027682c037d1a8ed8693b0993d89 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in classroomlesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee9290a110b32c6fab4129e634205ed0b86080ccf328dfe5e17635bc85b7926 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in digitalexp-style-module-l9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1b3e9059995d4d535c65fafd0105eea420510acb17ad9befbc99c18aa25df9 package.json declares both preinstall and postinstall as node beacon.js, so beacon.js runs automatically on every npm install. beacon.js reads...

inspec_cve_2019_15224

una gemma rest-client dannosa Il 19 agosto 2019 è stato scoperto che la gemma rest-client aveva diverse versioni pubblicate contenenti codice dannoso. Scoperto il rest-client dannoso, si è accertato che diverse altre nuove gemme trasportavano codice simile. Copertura:...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

CVE-2022-32114

Strapi v4.1.12 Explicação da Vulnerabilidade: Uma vulnerabilidade de upload de arquivo irrestrito na função Add New Assets do Strapi v4.1.12 permite que atacantes executem código arbitrário por meio de um arquivo criado Vetores de Ataque: Após fazer upload de um arquivo contendo conteúdo malicios...

CVE-2026-22008-AWS-Lambda-Layer-Injection-via-Shared-Layer-ARN

CVE-2026-22008 – Iniezione di Layer AWS Lambda tramite ARN di Layer condiviso Codice del programma Python root@kitploit: deployvulnerablelambda.py - Lambda function using a layer from untrusted account import boto3 lambdaclient = boto3.client'lambda' Attacker publishes a public layer containing...

VN_daily_samples

Dies ist ein Repository, das sich auf bösartige Proben bezieht, die aus Vietnam hochgeladen wurden...

Linux Distros Unpatched Vulnerability : CVE-2026-78376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

are-you-get-tanstack-attack

TanStack Router CVE Scanner Uno strumento di scansione della sicurezza per rilevare la CVE di TanStack Router | GHSA di TanStack Router nei tuoi progetti. Panoramica Questo strumento analizza il tuo codebase alla ricerca di indicatori della vulnerabilità di TanStack Router CVE-2026-45321 /...

Cups-RCE-Exploit

CUPS RCE Exploit – CVE-2024-47176 Kette Was es ist Ein voll funktionsfähiger Proof-of-Concept-Exploit, der die im September 2024 entdeckte Remote-Code-Ausführungsschwachstellenkette von CUPS Common Unix Printing System angreift. Diese Kette besteht aus vier CVEs – CVE-2024-47176, CVE-2024-47076,...