Lucene search
+L

630055 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/07 4:56 a.m.•32 views

Malicious code in cb-wallet-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29044036392080bdeaddb33f07b5b5b09b7b6f0792f0bc711979738a27d1557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/07 4:56 a.m.•37 views

Malicious code in scw-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e609dfddbc549c740b78ea2dfcc4dc218584bdb695d1967e49e262c3ed2fb8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/07 4:56 a.m.•41 views

Malicious code in cb-wallet-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86afbbd47bbbe39fd4f8d9f4146149d70fbb46777c17eebf0c52fd6cef1fef8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/07 4:56 a.m.•9 views

MAL-2026-16023 Malicious code in base-app-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385b3732590f10aba4436505fecbd325128919df56f33c060ef3f9f557ead91f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/07 4:56 a.m.•8 views

MAL-2026-16037 Malicious code in scw-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e609dfddbc549c740b78ea2dfcc4dc218584bdb695d1967e49e262c3ed2fb8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/07 4:56 a.m.•14 views

MAL-2026-16028 Malicious code in cb-wallet-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86afbbd47bbbe39fd4f8d9f4146149d70fbb46777c17eebf0c52fd6cef1fef8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/07 4:25 a.m.•15 views

git-dumper v1.0.9

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install git-dumper Usage usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show thi...

6.5AI score
SaveExploits0
osv_mal
osv_mal
•added 2026/09/07 12:00 a.m.•13 views

MAL-2026-16009 Malicious code in omni-channel-configurator-wireline-frontend (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•162 views

PT-2026-88190

These are all security issues fixed in the distribution-registry-3.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

5.8AI score
SaveExploits0References5
osv_mal
osv_mal
•added 2026/09/07 12:00 a.m.•8 views

MAL-2026-16007 Malicious code in @caliperx2/components (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-88195

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS7.3AI score0.00525EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•16 views

Slackware Linux 15.0 libxml2 Vulnerability (SSA:2026-249-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-249-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description block...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•23 views

PT-2026-88191

These are all security issues fixed in the gh-2.100.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-88186

These are all security issues fixed in the NetworkManager-1.56.1-4.1 package on the GA media of openSUSE Tumbleweed...

5.8AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/07 12:00 a.m.•36 views

Malicious code in omni-channel-configurator-wireline-frontend (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.7AI score
SaveExploits0References3
osv_opensuse
osv_opensuse
•added 2026/09/07 12:00 a.m.•10 views

OPENSUSE-SU-2026:11705-1 kimi-code-0.41.0-1.1 on GA media

These are all security issues fixed in the kimi-code-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.3AI score0.00931EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•22 views

PT-2026-88203

These are all security issues fixed in the python313-fastapi-0.138.0-2.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.8AI score0.01523EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/07 12:00 a.m.•35 views

Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-88193

These are all security issues fixed in the hauler-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed...

5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-88204

These are all security issues fixed in the python313-idna-3.19-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.9AI score0.01386EPSS
SaveExploits2References2
Rows per page
Query Builder