629288 matches found
CVE-2026-73334
The org.apache.parquet.crypto.keytools package in Apache Parquet (versions 1.12 to 1.18) is vulnerable to a Server-side Request Forgery (SSRF) due to a host validation bypass. When the KMS URL is file-controlled rather than application-controlled, the FileKeyUnwrapper forwards the URL to a plugga...
RHBA-2020:0582 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory
Bulletin has no description...
GHSA-2V4P-QF9Q-27WJ vulnerabilities
Vulnerabilities for packages: grafana-mimir, crossplane-provider-aws-sfn, crossplane-provider-aws-osis, crossplane-provider-aws-pinpoint-fips, aws-network-policy-agent-fips, longhorn-engine, drone-fips, rancher-support-bundle-kit, crossplane-provider-aws-rolesanywhere, spicedb, influxd-fips,...
Malicious code in databricks-webapp-navigation-homepage (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 31ec3549efe09642c539f13af8a2a75949a356f55046b6298c21a2deedda322c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-16080 Malicious code in databricks-webapp-navigation-homepage (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 31ec3549efe09642c539f13af8a2a75949a356f55046b6298c21a2deedda322c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in server-authorized-cleanup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint...
MAL-2026-16079 Malicious code in server-authorized-cleanup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint...
Malicious code in cache-cleanup-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2931c2feef07a63612b0886a1840e519516424af0fbf4fb0a138e97736a18857 cache-cleanup-module ships an exported runOperation that queries a hardcoded third-party endpoint at https://testback-2aqe.onrender.com/can-cleanup...
MAL-2026-16078 Malicious code in cache-cleanup-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2931c2feef07a63612b0886a1840e519516424af0fbf4fb0a138e97736a18857 cache-cleanup-module ships an exported runOperation that queries a hardcoded third-party endpoint at https://testback-2aqe.onrender.com/can-cleanup...
Malicious code in chai-as-sleek (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782914cb65e0d30697eb54f50a4c5b740a3a53941abc185759e296c1d2ec8e9e Package published as 'chai-as-sleek' impersonates the pino logger: README, LICENSE, docs/, and index.d.ts are copied verbatim from pino, while...
Malicious Package
Overview @fyxzpediaa/baileys is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of t...
Malicious Package
Overview sonmors is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the sonmors...
Malicious Package
Overview @vallensofficial/baileys is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances...
Malicious Package
Overview open-item-validator is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of t...
Malicious Package
Overview rojo-rbx is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the rojo-rbx...
Malicious Package
Overview punypump is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the punypump...
Malicious Package
Overview server-authorized-cleanup is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instance...
Malicious Package
Overview gloggo is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the gloggo...
Malicious Package
Overview selfcerts is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the selfcer...
Malicious Package
Overview easypanel-agent is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...