Malicious code in dot-env-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b904cb582cf9170852021ecdcf038d94bbdeba48b650873716c45f7b64428a The package dot-env-buffer was found to contain malicious code. Source: ghsa-malware c4ad07e4f6d317d9cc416752d30839302c835d6eb881eed62ddba910fcd47945...

Malicious code in dux-portal-privacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778d9354ebf0d92914de85f6574e0a28cb68ad89214b500706673ac9f20c4a7 The package dux-portal-privacy was found to contain malicious code. Source: ghsa-malware...

Enhanced Cyber Threat Intelligence by Network Forensic Analysis for Ransomware As a Service(RaaS) Malwares

In the current era of interconnected cyberspace, there is an adverse effect of ransomware on individuals, startups, and large companies. Cybercriminals hold digital assets till the demand for payment is made. The success of ransomware upsurged with the introduction of Ransomware as a ServiceRaaS...

Mastang Panda Uses Venezuela News to Spread LOTUSLITE Malware

Researchers have found a new spying campaign using news about Venezuela to trick US government officials. Learn how the LOTUSLITE virus sneaks into computers to steal secrets...

Malicious code in nanoinstaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f6ea4dd9867e528445ba01d2ceed3638e6178b2a940a2598c0f89eca5795802 Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has...

MAL-2026-341 Malicious code in ofjaaah-auth-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680db6543dbee7ec4f8cfe557fc5c76a13bb684b7faeec4e6e2582c0d89ecdf7 The package ofjaaah-auth-module was found to contain malicious code. Source: ghsa-malware...

MAL-2026-345 Malicious code in private-payment-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c4346497d58e1d5eca5c47353d4491578827b6095eb0f62dc7ff4449c0758b The package private-payment-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in ofjaaah-build-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f994ed6a23b4449a3ab09537485788c488a90e26c56c52d309b4704d8d2da9 The package ofjaaah-build-tools was found to contain malicious code. Source: ghsa-malware...

MAL-2026-342 Malicious code in ofjaaah-build-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f994ed6a23b4449a3ab09537485788c488a90e26c56c52d309b4704d8d2da9 The package ofjaaah-build-tools was found to contain malicious code. Source: ghsa-malware...

Malicious code in @cda-apps/source (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5806c1f8be7708beab46a8c3d8c222da577363ce72533ed3fb40aadd28a7c2 The package @cda-apps/source was found to contain malicious code. Source: ghsa-malware 356aaa5e677bd040b40c0cec9325f05ae0c9e0e05c364bc0db6ba9837d4607...

Malicious code in libsignal-yazxzcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db042c351f97e2a47e3c5b6601e1603d87c4e99ff03ac8ea26863c40f15f335c The package libsignal-yazxzcode was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview 1231dai is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in viem-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dca89de6152d63a64cab3a25d8444853cfdd2502260ea1d2b33f055d4adaec The package viem-js was found to contain malicious code. Source: ghsa-malware 7b2687f596cd8f76eec0d498e10a1f632b4ae06acd052210c214ee332feddb9d Any...

MAL-2026-330 Malicious code in @daffadeveloper/signal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0087b0a9b601b66eed90dbf41396601a483159b3e74933ad6ed63e6a06e3d1 The package @daffadeveloper/signal-node was found to contain malicious code. Source: ghsa-malware...

MiracleLinux 3 : xulrunner-1.9.2.11-4.0.1.AXS3 (AXSA:2010-480:08)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2010-480:08 advisory. XULRunner provides the XUL Runtime environment for Gecko applications. Security issues fixed with this release: CVE-2010-3765 Mozilla Firefox 3.5.x through...

Malicious code in urlssser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4a59189804dc7b527969a4ed7e4d95fac2b98812c309142270b27cdca47729be This package does not directly contain malicious code, but was uploaded as part of the malicious campaign and is used as a helper in further infection stages...

Exploit for CVE-2025-8489

100-days-challenge-day-21--WP scan WP Scan helped identify co...

CVE-2026-23729

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarDescricao and...

CVE-2026-23729 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarDescricao and...

CVE-2026-23727 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=TipoSaidaControl...