pkgxray

pkgxray — безопасность до установки для npm-пакетов, MCP-серверов и ИИ-агентов Проверяйте npm-пакет или MCP-сервер до того, как установите или подключитесь к нему, и получайте детерминированный вердикт SAFE, REVIEW или BLOCK, подкреплённый доказательствами. Локальный статический анализ без...

np-audit

np-audit — аудитор npm-пакетов Статический анализ безопасности npm-пакетов — обнаруживает обфусцированные жизненные скрипты, известные уязвимости и вредоносные паттерны до их выполнения. Прямая замена для npm install и npm ci. Ноль зависимостей. Только встроенные модули Node.js. 100 кБ при...

tanstack-shield

🛡️ tanstack-shield Scanner d'attaques de la chaîne d'approvisionnement en une commande pour CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Détecte le ver « Mini Shai-Hulud » qui a compromis 42 packages npm @tanstack/ 84 versions malveillantes le 11 mai 2026. Une ligne — analysez votre projet curl -fsSL...

tanstack-compromise-checker

tanstack-compromise-checker ⚠️ Avertissement : Cet outil a été conçu pour mon propre usage. Tous les indicateurs proviennent des sources d'avis suivantes : GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive Si de nouveaux IOCs, variantes de charge...

scan-shai-hulud

scan-shai-hulud Быстрый сканер Bash с нулевыми зависимостями для обнаружения, затронута ли ваша машина атакой на цепочку поставок CVE-2026-45321 "Mini Shai-Hulud". 11 мая 2026 года более 170 пакетов npm и 2 пакета PyPI из TanStack, Mistral AI, UiPath, OpenSearch и Guardrails AI были одновременно...

tanscript-exploit-check

Mini Shai-Hulud Supply Chain Attack — IOC Checker curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash Или склонируйте репозиторий и запустите локально: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd...

pmg

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

scavenger_scanner

Сканер IOC CVE-2025-54313 Кроссплатформенные сканеры для обнаружения индикаторов компрометации IOC, связанных с атакой на цепочку поставок eslint-config-prettier CVE-2025-54313. 18 июля 2025 года несколько популярных npm-пакетов были скомпрометированы в результате фишинговой атаки. Злоумышленник...

CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

EUVD-2026-90645

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

CVE-2026-103251

The software n8n versions before 1.123.80 , 2.39.6 , and 2.40.1 contains a validation bypass vulnerability in the community package installation handler specifically for queue mode deployments . An attacker with Redis write access can bypass name validation, permission checks, checksum verificati...

CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

CVE-2026-103251: Missing Authorization

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

Kothamine malware uses Tailscale’s tailcat to evade network detection

We discovered an undocumented remote-access Trojan RAT called Kothamine Agent. It supports more than 30 commands and it gives attackers control of an infected Windows computer: they can run commands, read and change files, and add new capabilities. Some versions can also steal browser data and...

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: npm, kubeflow-centraldashboard, jupyter-base-notebook, code-server, prism, saf, renovate, opensearch-dashboards, sqlpad, lerna, pulumi, node-gyp...

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence AI-powered Linux implant dubbed RedC2 4.0. "When the module loads, it locates the bundled binary,...

CLSA-2026-1786791608 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 15.2.2-tuxcare.3...

CLSA-2026-1786739230 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 20 @angular packages to address 2 CVEs. Fixed in 8.0.3-tuxcare.6...

@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...