CVE-2026-69414

Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.

Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14076 Malicious code in bcs-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e476c27d0fcb2d394107a3fa8131c7b278152340ef508f1a13658e19cbbed5 bcs-mini presents itself as a BCS codec but contains an install/require-time payload in index.js that steals Sui wallet material. On module load, a...

MAL-2026-14095 Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in bcs-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e476c27d0fcb2d394107a3fa8131c7b278152340ef508f1a13658e19cbbed5 bcs-mini presents itself as a BCS codec but contains an install/require-time payload in index.js that steals Sui wallet material. On module load, a...

Malicious code in @peptideventure/peptide-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 155eb4b5267fa1257d06da30180a29bfd92d5779539c9ffd2160ba836cc7f96f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @peptideventure/peptide-score-modifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Threat actors are acquiring expired domains to inherit their website traffic and reputation with an aim to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain...

Malicious code in @devmikets/hyperliquid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c401f279d5ea91e416e18e54888c22d1087a44449aa9629dfb86f3c5945ec903 package.json declares inquirer with a tarball URL pointing at registrynpmjs.to — a domain that typosquats the official npm registry registry.npmjs.or...

Malicious code in @demopack/www (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65caef119676a35e0ed5c3ef5a3be0d08c6a487c57270c802319fe68521dadd Package.json describes the package as 'Static assets distribution', but the shipped HTML/JS is an iOS-version-gated payload loader. js/index.js...

Malicious code in alelo-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2585f71b11041c61a65dffdaa569b2e77a0e4415bd73e34a3142a61ad0f6c4e The package's preinstall script preinstall.js collects hostname, username, platform, current working directory, and the full process.env, then POSTs...

Malicious code in alelo-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ed1d4017e58a9911a0cfee5d1cf8122a2ac28779a36fdf3ef74484f048748 [email protected] ships lifecycle scripts that harvest installer data and POST it to a hardcoded bare-IP endpoint 209.99.185.109 with TLS certificate...

MAL-2026-14028 Malicious code in alelo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1fd03e0ca4d5452b6a5d6aa2880a9c711021e287eaae056e68f70f6aedc926 On npm install, preinstall.js collects hostname, username, platform, cwd and the full process.env and POSTs the JSON body to...

MAL-2026-14033 Malicious code in meualelo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fdf84c3f49f6d13b7ccbed745056f8bf03c4c7a2b814152962361ac07bd4191 The package's preinstall.js collects hostname, username, platform, cwd, and the full process.env, then POSTs the JSON payload over HTTPS with TLS...

Malicious code in alelo-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6898fc8ceef98678ef5e208de13006abf0684d219babdee50f6f90b732092f8b [email protected] is a dependency-confusion / impersonation package targeting an internal 'Alelo' namespace version 99.0.0, generic 'internal...

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...

Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5955868f72344703128add3301e3a85b51773de502f24e636fe0b9bba86d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ak-mal-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb1e00b87448788cd84d0c30aa68374d531288859498450fe6db4ab3e2d63e42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14081 Malicious code in game_overlay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e941794f17bbd4170928ecfb4c2affa3b9464d9227bc5671e4899aaca4a88db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in game_overlay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e941794f17bbd4170928ecfb4c2affa3b9464d9227bc5671e4899aaca4a88db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...