MAL-2026-4431 Malicious code in @scp3500/openvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee1ab6796d8af462e9f00e82a28545b72eae4d9d9f0ab0f36ca4b09cd29487c scripts/mcpserver.js loads childprocess, fs, and http, reads from process.env, and issues HTTP POST requests to a hardcoded external destination at...

Malicious code in @scp3500/openvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee1ab6796d8af462e9f00e82a28545b72eae4d9d9f0ab0f36ca4b09cd29487c scripts/mcpserver.js loads childprocess, fs, and http, reads from process.env, and issues HTTP POST requests to a hardcoded external destination at...

CVE-2026-8610

creationtimestamp| type| source ---|---|--- 2026-05-20 12:32:20+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmbvxx73b22a...

CVE-2026-47783

creationtimestamp| type| source ---|---|--- 2026-05-20 11:52:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmbtqvnqvt2k 2026-05-21 23:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmfllxhfro2s...

CVE-2026-6405

creationtimestamp| type| source ---|---|--- 2026-05-20 11:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbsf4lnut2c 2026-05-20 13:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmbzda6puq2s...

SUSE-SU-2026:21737-1 Security update for iproute2

This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences bsc1254324. Changes for iproute2: - support display of bound but unconnected sockets bsc1204562. - avoid spurious cgroup warning bsc1234383. - add post-6.4 follow-up fixes...

CVE-2026-45133

creationtimestamp| type| source ---|---|--- 2026-05-20 11:01:22+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqvocnsc2h 2026-07-14 19:47:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmxxibpsn2q 2026-07-19 15:37:07+00:00| seen|...

CVE-2026-45069

creationtimestamp| type| source ---|---|--- 2026-05-20 10:58:12+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqpbof7o2y 2026-07-14 20:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyzr2zyk2w 2026-07-16 12:37:06+00:00| seen|...

CVE-2026-47732

creationtimestamp| type| source ---|---|--- 2026-05-20 10:33:02+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpcmjit42m...

CVE-2026-46637

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:39+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpakjssk26...

CVE-2026-46627

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:26+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpa5zf3m2v...

CVE-2026-46633

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:57+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp77j3sk2h 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128 2026-06-20 13:22:38+00:00| seen|...

CVE-2026-46634

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:46+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6ssob226 2026-07-15 09:34:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqog546kbn2u 2026-07-17 15:18:04+00:00| seen|...

CVE-2026-46635

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:36+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6odfv62o...

Malicious code in klaudius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b40ecfc7aa434ac63d620d4aaab0434dd57b0fac274bb9f5d1514e263be4a3 The package's CLI bundle dist/bin.js and an associated chunk dist/chunk-SZ4KCTSL.js contain hardcoded fetch POST calls to https://api.telegram.org, t...

MAL-2026-4593 Malicious code in klaudius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b40ecfc7aa434ac63d620d4aaab0434dd57b0fac274bb9f5d1514e263be4a3 The package's CLI bundle dist/bin.js and an associated chunk dist/chunk-SZ4KCTSL.js contain hardcoded fetch POST calls to https://api.telegram.org, t...

MAL-2026-4434 Malicious code in @semacode/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a3662b8e26593b7bfec35d4d4f02595144885ee738891c4c9e6a89f9e50fbb The bundled CLI dist/index.js contains a hardcoded outbound POST to https://sema.otimitare.online combined with reads of process.env and...

Malicious code in @semacode/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a3662b8e26593b7bfec35d4d4f02595144885ee738891c4c9e6a89f9e50fbb The bundled CLI dist/index.js contains a hardcoded outbound POST to https://sema.otimitare.online combined with reads of process.env and...

Malicious code in local-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4649a6cac828460ea4a3e6d867038eaa507f109eb6a46de9eef1fc340d867608 The package executes lifecycle and import-time code that fetches executables and posts host data to off-publisher infrastructure. download.js line 92...

MAL-2026-4601 Malicious code in local-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4649a6cac828460ea4a3e6d867038eaa507f109eb6a46de9eef1fc340d867608 The package executes lifecycle and import-time code that fetches executables and posts host data to off-publisher infrastructure. download.js line 92...