CVE-2026-71239

DjangoCRM's massmail module renders user-controlled EmlMessage fields subject, content through Django's Template constructor with no sanitization, in at least three locations: messagepreviews.py builds an f-string embedding message.subject/message.content directly into a Template call;...

Exploit for CVE-2026-15430

AxHunter PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driv...

Malicious code in statist-browser-typed-client-ddp.mentat.ui.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc78a545236395c12156cd5f8e36337df53024afd0a6a6da75f81fb9b7c11e7 The package's main entry index.js loads polyfill.js, which on module load detects OS and architecture, fetches a per-platform binary over HTTPS from...

Malicious code in hubert-react-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765788871d6200a403058846fe3599c2c59588a6b00efc9ee770d7d1501e1b74 The package's main entry index.js unconditionally requires./setup.js on import. setup.js reconstructs Cloudflare Workers hostnames from string-fragme...

MAL-2026-12292 Malicious code in twork-data-services-getting-arrests (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfe9505e3a40e8cd4c314f982901e6cbc0c988fbe6ae5fef58c6c1dc5b78a33 [email protected] acts as a binary dropper. index.js top-level requires./support.js, whose start runs at load time: it selec...

Malicious code in sme-scripts-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b75dc70e9ee97206f0c177de615ca37ed1611752e645127bc6961e5d753f61f On require'sme-scripts-cli', index.js loads bridge.js which detects OS/architecture, downloads an OS-specific binary from hardcoded Cloudflare...

MAL-2026-12128 Malicious code in aasp-tent-aasp-tent-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f40a1f6a1ee90eed076db7cd24155d8dd0ceb6f3bd3b0698eb9ff0b0543efee On require of the package, index.js loads compat.js, which detects the host OS/arch and fetches a per-platform native binary from author-controlled...

OPENSUSE-SU-2026:21535-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Changes for rsyslog: - added a devel...

Malicious code in tramvai-module-feature-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8841208443b6595c8389bfac3e1cdb59a65ad0bc05a8dd3e01ca5c661287e56 On require of the package, index.js loads setup.js which downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...

MAL-2026-12134 Malicious code in accounts-limits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c43a5fbac213b36e4a3d7c25d7f41311e6f3f111f3b175e2f306077afbcde0 index.js unconditionally requires./runtime.js, which on module load selects a per-platform asset path, fetches an opaque binary from one of three...

MAL-2026-12284 Malicious code in tinkoff-volna-zustate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01865b8f060a3e4a24f34537d14ace960460519b2e5e3073083c7de9da63bd9e On require'tinkoff-volna-zustate', index.js loads bridge.js which downloads a platform-specific binary from obfuscated Cloudflare Workers hosts...

Malicious code in tinkoff-pfp-block-desktop-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb6e14dbfc0f3652dc22dad7f0370d158dc3e7c6cc9ea08aaad5ac91d9a4b01 On require, index.js loads ext.js which reconstructs endpoint hostnames from split string fragments oob-worker.cf100-416.workers.dev,...

MAL-2026-12247 Malicious code in tinkoff-pfp-block-desktop-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb6e14dbfc0f3652dc22dad7f0370d158dc3e7c6cc9ea08aaad5ac91d9a4b01 On require, index.js loads ext.js which reconstructs endpoint hostnames from split string fragments oob-worker.cf100-416.workers.dev,...

MAL-2026-12260 Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf869ab3e355848cb77fff3b129c2fe0b80e01286fe28783a0e66e064cee87e On require of the package, index.js loads loader.js which downloads a platform-specific native binary from Cloudflare workers.dev endpoints whose...

Malicious code in bigops-data-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b56d364976ed784e51324fe29d849cb6ac3495d32a5474e98eaf19ae7a308d0 On require of bigops-data-storage, index.js loads compat.js which unconditionally runs a top-level routine that downloads a native executable from...

Malicious code in bigops-awesome-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1204820931e9021a079d3347320d6c127f68297ee6b0223b37967f6c2601f78 index.js unconditionally requires./loader on module load. loader.js reconstructs endpoint hostnames from split string arrays evading static matching,...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

copyfail-guard Ferramenta de detecção e mitigação automatiz...

Malicious code in sso-tramvai-module-context-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe37796b442cbefe81da5d36efbb44744656e6ef3d34677ad4f6185f344d22 The package advertises itself as an auth-token handler but on require its index.js loads vendor.js, which reconstructs destination hostnames from arr...

MAL-2026-12073 Malicious code in sso-tramvai-module-context-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe37796b442cbefe81da5d36efbb44744656e6ef3d34677ad4f6185f344d22 The package advertises itself as an auth-token handler but on require its index.js loads vendor.js, which reconstructs destination hostnames from arr...

Malicious code in sotqa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6980ae2860be6b9f343e9705a5415dc9ea13a81d285c1dce1f2f56b3dc989fbd On require, sotqa-test loads bootstrap.js which reconstructs C2 hostnames from split-string arrays joined at runtime oob-worker.cf102-baf.workers.dev...