2927 matches found
MAL-2026-14283 Malicious code in neverthrow-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6f9496a578c672b465944e85c471edd19ce837ec7693d472d6c4a3ea3733a7 [email protected] is a typosquat of the popular neverthrow library. Its package.json declares a preinstall script node -e...
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre NCSC-NL has warned. The vulnerability in question is CVE-2026-65400 CVSS score: 9.8, a critical authentication issue...
Malicious code in @lodash-js/lodash-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e8f6925f88772bdb738b691a200f670aebecaef33c066a379d9424c7910a5a The package is published under a name mimicking lodash but its manifest's main entry is dist/xelis-miner.browser.js, a Xelis Stratum cryptocurrency...
Malicious Package
Overview @years19/n8n-nodes-utils-helper-q is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Malicious Package
Overview @kuperka/chainguard-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview daytona-test-miner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data
Summary GET /v1/contributors/:login/profile and the gittensorygetcontributorprofile MCP tool skip the contributor-scoped access check that every sibling endpoint enforces. Any authenticated session/API/MCP token holder can read any contributor's profile; for confirmed Gittensor miners that expose...
multivitamin (1.3.23), secret-miner (>=0.1.2, <=0.2.5) potentially affected by CVE-2025-71176 via pytest (3.6.2)
pytest PYPI version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - multivitamin 1.3.23 - secret-miner =0.1.2, =0.2.5 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...
CVE-2026-14723
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
CVE-2026-14723
The vulnerability CVE-2026-14723 affects AD-Security AD_Miner 1.9.0. It resides in the Cache Handler, specifically the analyse_cache.py file’s function request_a. Manipulating the argument sys.argv[1] leads to deserialization, enabling a local exploit. Public details note that exploitation is loc...
CVE-2026-14723 AD-Security AD_Miner Cache analyse_cache.py request_a deserialization
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
CVE-2026-14723
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
CVE-2026-14723 AD-Security AD_Miner Cache analyse_cache.py request_a deserialization
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
PT-2026-55776
A vulnerability was determined in AD-Security AD Miner 1.9.0. Affected is the function request a of the file ad miner/scripts/analyse cache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull...
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 CVSS score: 9.3, an unauthenticated remote code execution RCE vulnerability in Langflow,...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojack...
HOV4X
HOV4X HOVAX - 45 Modules Security Toolkit for Penetration Test...
Firmware Distribution As Attack Surface: A Security Study of ASIC Cryptocurrency Miners
ASIC cryptocurrency miners are a core component of blockchain infrastructures, directly converting computation and energy into monetary value. Despite their economic im- portance, their security is rarely evaluated in a structured manner. In this paper, we show that the firmware distribution...
PT-2026-36036
NEW THREAT INTEL: Qinglong Auth Bypass Chain to RCE - CVE-2026-3965 + CVE-2026-4047 CVSS 9.3 chained for unauth RCE on Qinglong = 2.20.1, dropping .fullgc cryptominer. 9 detections, 20 IOCs. https://t.co/dXJBNXiie3 ThreatIntel CyberSecurity RCE CVE https://t.co/PmenIBo9jX...
CVE-2026-40880
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-consensus version 5.0.2, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By carefully submitting a transaction that is valid for height H+1 bu...