607385 matches found
Malicious code in agenttunnels (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264711675c5edabf4f3d0b1d544ca8bade34057c973ca614c82bca3cf8bdd5a1 agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker agenttunnels-session.lakshman111.workers.dev...
MAL-2026-13400 Malicious code in agenttunnels (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264711675c5edabf4f3d0b1d544ca8bade34057c973ca614c82bca3cf8bdd5a1 agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker agenttunnels-session.lakshman111.workers.dev...
Malicious code in @activepieces/piece-google-forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d347d6252c2a1bb21b4318c0a319be36d60a95b4146d91108cee13d52c5759 The published tarball for @activepieces/piece-google-forms 0.5.7 contains src/index.js which imports childprocess, invokes ping-style OS command...
Malicious code in @xiaohhhh1/canvas-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34add291ef7584aec7041449cb2e80d36ae98f93c2725e1aa018707e3334119 On bin start, @xiaohhhh1/canvas-agent opens an outbound WebSocket to the hardcoded relay wss://canvas.xiaohhhh1.com/api/agent-relay and treats inboun...
Malicious code in @vanexalabs-ai/vanexa-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...
Malicious code in streak-cache-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c390b9379b870b37038a8ad8f52b179d2fce3aa38fc15e5d1c9dc3f0ece135 The package advertises itself as a dependency-free calendar-day bucketing / streak math library, but its main module dist/index.mjs contains a...
MAL-2026-13403 Malicious code in streak-cache-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c390b9379b870b37038a8ad8f52b179d2fce3aa38fc15e5d1c9dc3f0ece135 The package advertises itself as a dependency-free calendar-day bucketing / streak math library, but its main module dist/index.mjs contains a...
RHSA-2026:44152 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:41020 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
ROOT-OS-ALPINE-315-CVE-2025-69420 CVE-2025-69420 in openssl - Patched by Root
Root has patched CVE-2025-69420 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-31802 CVE-2026-31802 in tar - Patched by Root
Root has patched CVE-2026-31802 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in tar - Patched by Root
Root has patched CVE-2026-24842 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-29786 CVE-2026-29786 in tar - Patched by Root
Root has patched CVE-2026-29786 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-23745 CVE-2026-23745 in tar - Patched by Root
Root has patched CVE-2026-23745 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-21687 CVE-2025-21687 in linux - Patched by Root
Root has patched CVE-2025-21687 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-71120 CVE-2025-71120 in linux - Patched by Root
Root has patched CVE-2025-71120 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38011 CVE-2025-38011 in linux - Patched by Root
Root has patched CVE-2025-38011 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37822 CVE-2025-37822 in linux - Patched by Root
Root has patched CVE-2025-37822 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...