MAL-2026-14318 Malicious code in frenchworldcupwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b41919d402aff87ec13d36b2419e4c19dcc209dcb6ffa3e736de5be2803e6 package.json declares its sole runtime dependency client-marker-packet-cluster as an arbitrary HTTPS tarball URL on a non-registry host...

Malicious code in test-flow-entire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2aa8c9e03f819fc35f4abe8554abf07333c68617df6a2f844d11bb3374594 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in frenchworldcupwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b41919d402aff87ec13d36b2419e4c19dcc209dcb6ffa3e736de5be2803e6 package.json declares its sole runtime dependency client-marker-packet-cluster as an arbitrary HTTPS tarball URL on a non-registry host...

Malicious code in test-flow-entire6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48cc690ceb502d2127045e27bfbdd18d18fe3cddb67eaaed906e75c7b735cc The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14321 Malicious code in test-flow-entire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2aa8c9e03f819fc35f4abe8554abf07333c68617df6a2f844d11bb3374594 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in fetch-webjs-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04692f011c8f5c87f51cd80b38eeb96ef1dc9eb0f98f6c141c97c639958a7eb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14317 Malicious code in fetch-webjs-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04692f011c8f5c87f51cd80b38eeb96ef1dc9eb0f98f6c141c97c639958a7eb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-66593

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

EUVD-2026-63336

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

CVE-2026-66593

CVE-2026-66593 is an unauthenticated SQL injection vulnerability in the WordPress plugin Security & Malware scan by CleanTalk , affecting versions ≤ 2.184 . The flaw allows a remote attacker to execute arbitrary SQL queries without authentication, leading to high confidentiality impact and low av...

RUSTSEC-2026-0259 `arone` was removed from crates.io due to malicious code

We identified that arone contained malicious code executed through a build script. This crate had 7 versions, with the most recent one being published at 2026-08-18. The crate was removed from crates.io on 2026-08-20 and the user account was locked. This crate was used as part of a malware campai...

`arone` was removed from crates.io due to malicious code

We identified that arone contained malicious code executed through a build script. This crate had 7 versions, with the most recent one being published at 2026-08-18. The crate was removed from crates.io on 2026-08-20 and the user account was locked. This crate was used as part of a malware campai...

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and European financial institutions, global fintech and cryptocurrency services, and military-focused communications. "Manic...

CAPE-parsers v0.1.68

CAPE-parsers CAPE core and community parsers Configs structure root@kitploit: CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here A...

drakvuf-sandbox v0.21.0

DRAKVUF Sandbox !WARNING Here be dragons 🐉. Maintaining your own sandbox is a difficult task and this project uses technology that is not user-friendly. Be prepared to brush up on your debugging skills as bugs may be reproducible only on your configuration. On the other hand, it's not purely an R...

EUVD-2026-62943

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

PT-2026-83619

We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack. This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked. This crate was used as part of a...

Malicious code in aronenao (crates.io)

aronenao is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...

Malicious code in tinymember (crates.io)

tinymember is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...

Malicious code in aovine (crates.io)

aovine is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...