MAL-2026-16068 Malicious code in @versacode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb56d60eb9a1df8a4b6dc87789234366b8431047ca01dbce807af874778ffa8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @vallensofficial/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02adc12975b9798883d78640d5cab1a73420818d23fbd192ebb76a384f056d54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16066 Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @yongot/canary-mcp-isolation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff9f45262c13bea579ed092cabfb043896d60c89787301b73eef78848802574 package.json declares a postinstall script that runs beacon.js, and index.js also requires beacon.js on load. beacon.js POSTs the installer's...

MAL-2026-16061 Malicious code in @yongot/canary-mcp-isolation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff9f45262c13bea579ed092cabfb043896d60c89787301b73eef78848802574 package.json declares a postinstall script that runs beacon.js, and index.js also requires beacon.js on load. beacon.js POSTs the installer's...

MAL-2026-16062 Malicious code in @yongot/canary-mcp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93b70d19f6065f9757e39a5d7f799ca9cfff26e2c47b6e4c51012a104885578 Package @yongot/[email protected] ships beacon.js which runs execSync'id', reads os.hostname, and issues an HTTPS GET to a hardcoded webhook.site...

Malicious code in selfcerts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5688e6ff2ef3728556e4e455154ad9a8f6c44670eee611d55adb3cba250536 index.js reads sample/cert.pem, strips the BEGIN/END CERTIFICATE header and footer, base64-decodes the body, and evals the result. The decoded bytes...

Malicious code in rojo-rbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf25c0dd3a1b933c3ee2fe887301590c3b92e383a1e6c380fcdb9544578720b The package impersonates the legitimate Rojo Roblox tooling project. Its npm install lifecycle runs scripts/install.js, which on Windows downloads a...

MAL-2026-16054 Malicious code in gloggo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d gloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text attributed to Blaine Bublitz, whil...

Malicious code in sonmors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e21634e32b7d24357ad667703da4ddeb42542ed9fc6a3ed28c7257d2e27fca Package sonmors ships a near-copy of the sonner React toast library and spoofs sonner's identity in package.json author Emil Kowalski , homepage...

PT-2026-89044

🚨 CVE-2026-86775 knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not...

PT-2026-89708

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

Fedora 44 : complyctl (2026-f33ade2ba6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f33ade2ba6 advisory. This update aligns the package to the latest Upstream release, which is also the first stable version of complyctl. It introduced the core redesign...

PT-2026-89716

These are all security issues fixed in the xen-4.22.0 04-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-87735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

Oracle Linux 9 : ELSA-2026-64774-0: / python3.14-cryptography (ELSA-2026-647740)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647740 advisory. 45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249 Tenable has extracted the preceding description block...

CVE-2026-87812: Improper Neutralization of Input During Web Page Generation

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping. Attackers can inject malicious URLs with event handlers that execute JavaScript in the authenticated...

PT-2026-88950

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping. Attackers can inject malicious URLs with event handlers that execute JavaScript in the authenticated...

Microsoft Azure Entra ID Compatibility Package Privilege Bypass

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...