606865 matches found
Malicious code in svelte-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2172e0671582a6e9c3359cd893cb96a7a09706ae0670208ddfbc82636a828fed [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating credential access, exfiltration,...
MAL-2026-13679 Malicious code in svelte-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2172e0671582a6e9c3359cd893cb96a7a09706ae0670208ddfbc82636a828fed [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating credential access, exfiltration,...
GHSA-WHVH-WF3X-G77J vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
CVE-2026-45021 vulnerabilities
Vulnerabilities for packages: kuma...
GHSA-3VCP-CHFH-F6R2 vulnerabilities
Vulnerabilities for packages: kuma...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: coder, gitsign, cloudbeat, kyverno-fips, cloudbeat-fips, xeol-fips, kubescape-server, jfrog-cli, grype-db, zot, nuclio-controller-fips, bom, steampipe, trivy, guac, k9s-fips, amazon-ssm-agent, kubescape, chainloop-cli-fips, gitea-fips, teleport, nfpm,...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: airflow, mitmproxy, open-webui...
CVE-2026-45021 vulnerabilities
Vulnerabilities for packages: kuma...
GHSA-3VCP-CHFH-F6R2 vulnerabilities
Vulnerabilities for packages: kuma...
Malicious code in modern-localization (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be23667d11e7ef3357641973b9188175c2068bd2b580a5628773bcdf03533a5 On server-side require of modern-localization, the package's main entry runs a top-level async IIFE syncLanguageSystem that performs an HTTP GET...
Malicious code in @rbx-ts/services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...
Malicious code in map-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80727943437a7e22116b369c010fc965c4854a0c58a053504c4bc55555e90dd4 On import, dist/index.mjs chmods 0755 and spawns the bundled Linux x8664 binary dist/internal/calc-math.dat as a detached background process. The...
Fedora 43 : erlang (2026-4220305a93)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4220305a93 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Linux Distros Unpatched Vulnerability : CVE-2026-71870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function...
Fedora 44 : erlang (2026-7a3db128e8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a3db128e8 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Photon OS 5.0: Perl PHSA-2026-5.0-92-0946
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-50159 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...