MAL-2026-14059 Malicious code in autbank-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4077e84d7c02b7a8259ade848e89f9fd07ba0db7fb06bbaaa0c6e75f3e007d On npm install, preinstall.js enumerates process.env for keys matching credential substrings KEY, SECRET, TOKEN, PASSWORD, AWS, API, CREDENTIAL, AUTH...

MAL-2026-14056 Malicious code in gunzip-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d410844f9db44f33c2f674456c727d4c46402ad8f4de02a036fec3b099b2737b [email protected] is a near-empty npm package typosquat of the well-known gunzip-maybe / gunzip family whose package.json declares its sole dependency...

Malicious code in require-i18next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5f50249e747ea23b84fdc6baa2202e9d786a872fd7d9a545017dc6fc5ad788 The package's preinstall.js reads a hex-encoded command string from preinstall.json, decodes it with Buffer.fromhex, 'hex', and passes the result to...

Malicious code in kit-hydration-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...

Malicious code in svelte-goal-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14096 Malicious code in svelte-goal-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14086 Malicious code in kit-hydration-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...

EUVD-2026-58811

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...

CVE-2026-69414

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...

CVE-2026-69414

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...

CVE-2026-69414

Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.

Malicious code in bcs-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e476c27d0fcb2d394107a3fa8131c7b278152340ef508f1a13658e19cbbed5 bcs-mini presents itself as a BCS codec but contains an install/require-time payload in index.js that steals Sui wallet material. On module load, a...

Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14095 Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14076 Malicious code in bcs-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e476c27d0fcb2d394107a3fa8131c7b278152340ef508f1a13658e19cbbed5 bcs-mini presents itself as a BCS codec but contains an install/require-time payload in index.js that steals Sui wallet material. On module load, a...

Malicious code in @peptideventure/peptide-score-modifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @peptideventure/peptide-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 155eb4b5267fa1257d06da30180a29bfd92d5779539c9ffd2160ba836cc7f96f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14044 Malicious code in @ferudionz/web_logger_js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42924eef53202ac8b42a142da91ff30445dab53dcf185fa4798efd4d40d1b095 The package ships a single obfuscator.io-style index.js with a rotated string array, RC4 key-schedule + XOR string decoder, self-defending anti-debug...

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Threat actors are acquiring expired domains to inherit their website traffic and reputation with an aim to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain...

Reversecore_MCP v3.0.3

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...