196374 matches found
Malicious Package
Overview ts-typeguard-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview wm-plugin-json-conditions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Fedora 44 : aw-server-rust / awatcher / nodejs-aw-webui (2026-f4ddcfa64b)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-f4ddcfa64b advisory. Rebuilt with openssl 0.10.79 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. "Although the affected packages were all Composer packages, the malicious code was not added to composer.json,"...
MAL-2026-4411 Malicious code in @onerjs/inspector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c3c6c201db840a5576941656934704b0932abe72527c5e85b969fd90ad0ccd Package name, version 8.52.2, README, homepage and repository all impersonate @babylonjs/inspector. The shipped code is a 700-byte UMD wrapper that...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.2-1.hum1 aarch64, x8664 nginx-all-modules-1.30.2-1.hum1 noarch nginx-core-1.30.2-1.hum1 aarch64, x8664 nginx-filesystem-1.30.2-1.hum1 noarch nginx-mod-devel-1.30.2-1.hum1 aarch6...
CVE-2026-46628 vulnerabilities
Vulnerabilities for packages: drupal...
CVE-2026-46640 vulnerabilities
Vulnerabilities for packages: drupal...
GHSA-45VW-WH46-2VX8 vulnerabilities
Vulnerabilities for packages: drupal...
CVE-2026-46635 vulnerabilities
Vulnerabilities for packages: drupal...
Moderate Photon OS Security Update - PHSA-2026-5.0-0856
Updates of 'curl' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2026-5.0-91-0856
Updates of 'curl' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-4.0-1024
Updates of 'gnutls' packages of Photon OS have been released...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a remote code execution backdoor and an advanced credential stealer. A malicious actor exploited remapped historical tags to commit malicious commits, retroactively compromising over 700 versions of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a remote code execution backdoor and an advanced credential stealer. A malicious actor exploited remapped historical tags to commit malicious commits, retroactively compromising over 700 versions of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a remote code execution backdoor and an advanced credential stealer. A malicious actor exploited remapped historical tags to commit malicious commits, retroactively compromising over 700 versions of...
CVE-2026-45149 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, renovate, langfuse, ts-patch, tileserver-gl, pulumi, lerna, airflow, npm...
GHSA-FQW6-GF59-QR4W vulnerabilities
Vulnerabilities for packages: manifest-tool, kube-mgmt-fips, kubescape, cloudbeat, kube-mgmt, packer, trivy-operator, helm-mapkubeapis, buildkitd-fips, kaniko, linkerd2, helm-set-status, datadog-agent-fips, docker-cli-buildx, chaos-mesh-fips, syft-fips, helm-push, kots, redpanda-operator,...
CVE-2026-39964
TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer packages/embeds/js renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author can set a link URL to javascript:PAYLOAD, which executes in the visitor's browser...