Apkx-Hunter v2.6.0

APKX-Hunter v2.7.1 — Debian Package APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware analysis, OWASP MASVS compliance scanning, bug bounty hunting, and penetration testing. The...

CVE-2026-67344

creationtimestamp| type| source ---|---|--- 2026-08-01 15:20:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d 2026-08-01 22:26:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2j7rm62d25 2026-08-01 22:26:40+00:00| seen|...

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake , a remote access trojan RAT that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attribute it to...

MAL-2026-11491 Malicious code in test-dev-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b3df759cd11b9c662bed5840b0671d4e9c54a76a606d284ca39390ecf51f8d [email protected] connects out to a hardcoded socket server host/port sourced from the test-dev-config module and enters a receive-loop that...

Malicious code in test-dev-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ca0e645623ac78190f4921a1d577eeaaeaaca953f6310565db2b981d90b21 The package contains three files and produced no a static rule matches and no traced code behaviors of concern. The name and version pattern suggest ...

MAL-2026-11492 Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f4885b543da795140d0ac9c44423c6ecadf74c744c1f322f9d1a5263fe4f2 No static or traced behavioral signals of supply-chain attack were observed in this package. There is no evidence of install-time or import-time code...

VulnCheck KEV: CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

MAL-2026-11449 Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1ba538ee75936802bcb54b49dd258a1941bf7b9f07bc0b05db81fd656c47e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sw-commons-components/message-upsell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee504d58bc907a09044cba70345cf7bc8cf2266c20833ce8bae2866b205208c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11444 Malicious code in @mplay-frontend-ui/link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f2d06b568af724d0c5db157ecd8894e51acca5e9f1ae3d965ca5775afe852e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11450 Malicious code in @spending-behavior-ui/cashflow-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4297e338304a9686d295320c60149b746f9044b0cc158fc6743c670965f595fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @finance-ui/snackbar-ifpe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44977ea381cb1ef71bae69849b3091ee76769ad26363ba31525f96ca1128bda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a5f1c46b3dedff62a0fbbb97026f6ad0b4c59cbbfb5f3078de824328c09b8c metrics-ui is a functionally empty npm package hollow index.js, no scripts whose only effect on installers is pulling in a runtime dependency resolve...

MAL-2026-11473 Malicious code in metrics-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a5f1c46b3dedff62a0fbbb97026f6ad0b4c59cbbfb5f3078de824328c09b8c metrics-ui is a functionally empty npm package hollow index.js, no scripts whose only effect on installers is pulling in a runtime dependency resolve...

Malicious code in iwomm-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6a86a4bd25e85d55ccc7babe614b8cf8eb1b31572b67b1f463ad0302263669 lib/report.js imports childprocess, fs, https and os, collects host and user identity data via os.hostname and os.userInfo lib/report.js lines 160-16...

MAL-2026-11469 Malicious code in iwomm-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6a86a4bd25e85d55ccc7babe614b8cf8eb1b31572b67b1f463ad0302263669 lib/report.js imports childprocess, fs, https and os, collects host and user identity data via os.hostname and os.userInfo lib/report.js lines 160-16...

MAL-2026-11474 Malicious code in paraglide-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f62eaf75227ca79ee8d113b790e60589d2f29204db3e6f3939e3dd3c7527cf Package name closely resembles the widely used @inlang/paraglide-js i18n library, but the declared main entry index.js is only a helloWorld stub. The...

Malicious code in paraglide-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f62eaf75227ca79ee8d113b790e60589d2f29204db3e6f3939e3dd3c7527cf Package name closely resembles the widely used @inlang/paraglide-js i18n library, but the declared main entry index.js is only a helloWorld stub. The...

MAL-2026-11482 Malicious code in sap-mcp-facilitator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8470f17eabef0f8e78467a643e0bcd4598174a0647c241145e3a7a857156a64 lib/report.js collects the installer's developer identity — os.userInfo.username, os.hostname, and the git/GitHub email invoking gh api user/emails...

Malicious Package

Overview attio-discover is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...