613910 matches found
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
Malicious code in ml-core-airflow-auth (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a543a55b463967fa7f6b3c1462ecb38735072a4f4f47bf5f9b732e089a64b8a The package advertises itself as an 'auth token handler' but its public API src/mlcoreairflowauth/init.py exposes only a trivial in-memory TokenStore...
CVE-2026-46412 Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm
@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...
MAL-2026-10906 Malicious code in your-unique-package-name1337 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in your-unique-package-name1337 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in win-build-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bd3facc00c36861223058a572fbaa888d815a06c7b309c44639c544c65f1d9 The package name suggests a Windows build helper utility, but no concrete behavioral evidence is available to confirm or refute installer-side risk. ...
MAL-2026-10905 Malicious code in win-build-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bd3facc00c36861223058a572fbaa888d815a06c7b309c44639c544c65f1d9 The package name suggests a Windows build helper utility, but no concrete behavioral evidence is available to confirm or refute installer-side risk. ...
Malicious code in solana-web3-v1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073f4c1e75630bbf1c535a334f4d7f233a73439240bc22e69bac0e926c8c58a0 Package name closely mirrors the widely-used @solana/web3.js Solana SDK while being published under an unrelated, unscoped name. The bundled...
MAL-2026-10904 Malicious code in solana-web3-v1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073f4c1e75630bbf1c535a334f4d7f233a73439240bc22e69bac0e926c8c58a0 Package name closely mirrors the widely-used @solana/web3.js Solana SDK while being published under an unrelated, unscoped name. The bundled...
Malicious code in solana-web3-patched (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99e6f959c8df3e2933c860ba3d36dc5dbbd27d97a69a3e97a5a7feaf7e24899 Package name 'solana-web3-patched' resembles the legitimate '@solana/web3.js' library and is published as an unscoped lookalike at version 1.0.0. The...
MAL-2026-10902 Malicious code in solana-web3-patched (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99e6f959c8df3e2933c860ba3d36dc5dbbd27d97a69a3e97a5a7feaf7e24899 Package name 'solana-web3-patched' resembles the legitimate '@solana/web3.js' library and is published as an unscoped lookalike at version 1.0.0. The...
MAL-2026-10903 Malicious code in solana-web3-stable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38824d7f6044fd3177aba408a5f815879762d8829e56cb6692e2cad652f7d9e6 Package name 'solana-web3-stable' closely resembles the widely-used @solana/web3.js library, raising typosquat concern. The bundled lib/index.cjs.js...
Malicious code in solana-web3-lts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efd3d5cdcb8fb794a1702f586abd7018d86aad3e40286f5a43dd1127d804ed Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for installers reaching for th...
MAL-2026-10901 Malicious code in solana-web3-lts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efd3d5cdcb8fb794a1702f586abd7018d86aad3e40286f5a43dd1127d804ed Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for installers reaching for th...
MAL-2026-10900 Malicious code in solana-web3-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912cb41aa6b78cf62207dbf95f7d6247238483a800fa9bc6edd9b9d9f7819364 Package name appears to fork or imitate the well-known @solana/web3.js library. Bundled files lib/index.cjs.js and lib/index.esm.js contain...
Malicious code in solana-web3-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912cb41aa6b78cf62207dbf95f7d6247238483a800fa9bc6edd9b9d9f7819364 Package name appears to fork or imitate the well-known @solana/web3.js library. Bundled files lib/index.cjs.js and lib/index.esm.js contain...
MAL-2026-10899 Malicious code in solana-web3-fixed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d36c0e75143828e4a93135d0c54fb34dd6e75588a493ade663a1fa4b231230c Package name 'solana-web3-fixed' resembles a fix-branded variant of the legitimate '@solana/web3.js' library, a pattern frequently used in...
Malicious code in solana-web3-fixed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d36c0e75143828e4a93135d0c54fb34dd6e75588a493ade663a1fa4b231230c Package name 'solana-web3-fixed' resembles a fix-branded variant of the legitimate '@solana/web3.js' library, a pattern frequently used in...