Malicious code in @kxa/xbails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

lab_xz_backdoor

XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for understanding the xz-utils supply-chain backdoor — built for defenders, students, and blue-teamers. !WARNING This project handles real, in-the-wild malware the xz 5.6.0 / 5.6.1 backdoor. It is provided strictly for defensive education and...

Malicious code in captchetat-angularv8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42f7daad88efbe9f205eeac64d38e81a766c27080026a7adeb5d85e1ac30573c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Detect-CVE-2024-0762

Script de Detección de CVE-2024-0762 y Análisis de Malware Resumen Este script está diseñado para detectar versiones de firmware UEFI y evaluarlas en busca de vulnerabilidades relacionadas con CVE-2024-0762. Además, se integra con la API de VirusTotal para analizar archivos en busca de malware,...

CVE-2026-39768

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive...

CVE-2026-39768

...

EUVD-2026-93275

Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...

CVE-2026-39768

The Security & Malware scan by CleanTalk WordPress plugin (versions

CVE-2026-39768 WordPress Security & Malware scan by CleanTalk plugin <= 2.189 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...

Yara-detection-rules

Yara Rules A collection of experimental yara rules Covering a range of Malware Families and Attack Tooling Twitter: https://twitter.com/embeeresearch Includes Rules For Havoc C2 Brute Ratel NightHawk Qakbot IcedID Quasar RAT Cobalt Strike Vidar Remcos Xworm License The rules are essentially free ...

windows-malware-behavioral-analysis

Análisis de comportamiento de malware con REMnux y FLARE-VM Una investigación práctica de malware para el equipo azul que demuestra cómo se pueden analizar ejecutables sospechosos de Windows de forma segura dentro de un laboratorio aislado mediante técnicas de análisis de comportamiento. En lugar...

PT-2026-106440

Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

BlackSnufkin

🎯 Resumen del Perfil Finalmente has descubierto mi perfil de GitHub. No dudes en clonar/hacer fork de los proyectos, abrir issues y enviar PRs si crees que algo podría ser mejor. Lee mi blog para write-ups e investigación - ¡Feliz Hacking! 😊 struct OffensiveOperator handle: String, role: String,...

Kalim_Backdoor

Kalim Backdoor Malware Analysis Report This Report will talk about the functionality of Kalim Backdoor Malware. Table of Contents: - What is Backdoor? - Technical Analysis. - Summary. - Tactics & Technique MITRE ATT&CK. - IOCs. - Yara Rule. What does Backdoor mean? A backdoor is a hidden...

Malicious code in serpacksven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aa9ce877a176ce5c26aec2bce6e397ad287a6f26f625870cd5d6a5bef60cc9 The tarball contains only package.json and json.txt. The declared main index.js is absent, so requiring the package fails — the package is not a...

Malicious code in documenclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd20318a8d48dc20fee95097373ebd1039481031985164a651d2b68d366565a [email protected] publishes an npm package whose only shipped content is a heavily obfuscated PowerShell script embedded in the README. The script...

Malicious code in serpacksven1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d4a6a2715973b427bb0aa2b7a493ca711b7f16b5f47f90062edf790e0186a6 The tarball ships no JavaScript — the declared main: index.js is absent — and contains only 10 byte-identical copies of a PowerShell dropper under...

WordPress Security & Malware scan by CleanTalk plugin <= 2.189 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Security & Malware scan by CleanTalk versions = 2.189...

CVE-2026-50656

🚨 CVE-2026-50656 — Microsoft Defender "RoguePlanet" Elevation of Privilege Vulnerability in Microsoft Malware Protection Engine ⚠️ Educational and Defensive Security Research Only 📖 Overview CVE-2026-50656 is a high-severity Elevation of Privilege EoP vulnerability affecting the Microsoft Malware...