630094 matches found
Malicious code in trading-bot-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 653d164163afb590064deec1dc6619ed03e51360605a94e6ff789c83f6d9ec6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ens-namehash-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b2ef072c91f8f3543ffbe2c1058ad379782fece91aac0f3cd1eac6a931f60f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15984 Malicious code in gas-price-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f9689168acafb514d0ab0bb8710f1fce42e95560a2a0c7e0e6788e913e729 Package advertises itself as a public-RPC gas price checker but on first call to the exported getGasPrice API in src/envcheck.cjs it walks the caller...
MAL-2026-16003 Malicious code in trading-bot-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 653d164163afb590064deec1dc6619ed03e51360605a94e6ff789c83f6d9ec6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15981 Malicious code in eth-lib-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8d2399c30a7656138ab2024250aeb8814c3ccd32e0104f87933eece367a829 The package presents itself as an Ethereum balance helper, but on the first call to the advertised getEthLibBalance API it invokes...
Malicious code in eth-query-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a24a29ae503dbb2bc291fcbd2d7eafdc92a6927a9a91bbda677e9b9b9b8c22 Package presents itself as an Ethereum RPC query helper but src/envcheck.cjs walks the caller's project tree on first use of the advertised...
MAL-2026-15982 Malicious code in eth-query-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a24a29ae503dbb2bc291fcbd2d7eafdc92a6927a9a91bbda677e9b9b9b8c22 Package presents itself as an Ethereum RPC query helper but src/envcheck.cjs walks the caller's project tree on first use of the advertised...
RHSA-2026:54438 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
CVE-2026-71429 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
GHSA-528H-PC64-C93X vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
CVE-2026-71429 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
MAL-2026-15935 Malicious code in proxycer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2286dac5be0a9e8cc2e7b1ff92253d4b09beb0c43d5e795b9b9ea1391e6f8764 The package's top-level init.py imports starts.py, which is a single-line loader that reverses a 100KB string literal, base64-decodes it, marshal.loa...
MAL-2026-15934 Malicious code in dbt-sa-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a setup.py defines rcepoc and invokes it at module top level, so the code runs unconditionally during pip install dbt-sa-cli. The function collects...
CVE-2026-63435 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, commercial-gitlab-rails-ee-fips, ruby3.3-mail, pghero-fips, logstash, pghero, commercial-gitlab-rails-ee...
CVE-2026-84119 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84128 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84133 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84141 vulnerabilities
Vulnerabilities for packages: firefox...