MAL-2026-570 Malicious code in lyatly-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa157e65bb67cd3f088cc4f38956e3f1b9cd202f73a212f4a92a87528eecf054 The package lyatly-utils was found to contain malicious code. Source: ghsa-malware 204e1babf8aef5194fc7046392fad75412787d49c6468fe0a18394f9bdc4e416 A...

MAL-2026-571 Malicious code in okijuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601f49f065c65d113d5beac44277d35b15635f0d41817602602e01e963f96cdd The package okijuh was found to contain malicious code. Source: ghsa-malware f603bf2cf39f78f0445aa4f08f0f6432c7b6cc9358b44c0946de293a8e956865 Any...

MAL-2026-565 Malicious code in converse-rn-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d76925473e0e05137943f3ba72835d43a14fecbcd07a36ff4f8b362342a303 The package converse-rn-lib was found to contain malicious code. Source: ghsa-malware 2d5c359e434d151a2156ad29e2d3b287cd665dd67ede66ac8c32a968f2ebaef...

MAL-2026-576 Malicious code in teslaone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb43567bb439e05bc83e1c5606aea8567e811514d05c3fa914204631fc8d762 The package teslaone was found to contain malicious code. Source: ghsa-malware fdac9959b37ff7705cf813ced160feeae858ef6da9e1ec58b3d0f33f0ceda520 Any...

Broadcom Symantec Endpoint Protection Windows Agent security vulnerabilities

Broadcom Symantec Endpoint Protection Windows Agent is a client component of the endpoint security solution provided by Broadcom Corporation. There is a security vulnerability in Broadcom Symantec Endpoint Protection Windows Agent, which stems from a COM hijacking issue. This vulnerability could...

Emacs Extension Persistence

This module adds a lisp based malicious extension to the emacs configuration file. When emacs is opened, the extension will be loaded and the payload will be executed. Tested against emacs 29.3 build 1 on Ubuntu Desktop 24.04. Module Options msf use exploit/linux/persistence/emacs/extension msf...

SSH Key Persistence

This module will add an SSH key to a specified user or all, to allow remote login via SSH at any time. No payload is required for this module to work. If an SSH key is not provided, a new 4096 bit RSA keypair will be generated. The private key will be stored as loot for later use. Module Options...

Exploit for Server-Side Request Forgery in Microsoft

CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Micr...

netty-security-poc

Netty Security PoC — Deprecated API Risk & Patched API Validat...

Malicious code in xhjxhjhiagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43efa0b096b4c67e10ce3407f63028f07e80976db4f41bf71150da2cb9c1f5b The package xhjxhjhiagent was found to contain malicious code. Source: ghsa-malware 8b9bcd2d25d4b2a55daa6130b69af99dda27ac877c6aed00641d8a821cd1f1e5...

MAL-2026-546 Malicious code in xhjxhjhiagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43efa0b096b4c67e10ce3407f63028f07e80976db4f41bf71150da2cb9c1f5b The package xhjxhjhiagent was found to contain malicious code. Source: ghsa-malware 8b9bcd2d25d4b2a55daa6130b69af99dda27ac877c6aed00641d8a821cd1f1e5...

CVE-2025-67274

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...

CVE-2025-67274

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...

This Week in Spring - January 26th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this, I cannot believe we're nearly at the end of the month! Time sure flies. Spring AI 2.0.0-M2 is available now Spring Modulith 2.1 M1, 2.0.2, and 1.4.7 released In last week's installment of A Bootiful Podcast ,...

CVE-2025-67274

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...

CVE-2025-67274

CVE-2025-67274 affects continuous.software aangine v.2025.2. An issue in the excel-integration-service template download module, the integration-persistence-service job listing module, and the portfolio-item-service data retrieval module endpoints allows a remote attacker to obtain sensitive info...

CVE-2025-67274

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...

CVE-2025-67274

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...

Malicious code in overstock-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387cbf7de757b1668d6c0f2c9f81f9beab4f35af6f362c2ee434509070af2e34 The package overstock-component-library was found to contain malicious code. Source: ghsa-malware...

Malicious code in overstock-component-library-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3047a2aa0008e3dd53a44ed19238f41540af1763edd48a5db147506a32e6bf77 The package overstock-component-library-v3 was found to contain malicious code. Source: ghsa-malware...