seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

CVE-2026-51623

Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51623: Improper Access Control

Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Malicious code in @cats-cdf/authentication (npm)

Source: amazon-inspector 404569337a1e5fc46fff2584e052d2f9f99c3cb8d04e5fb3b5c5d633c178e01c The package's preinstall lifecycle script runs on npm install and collects the installer's local username whoami, hostname, and public IP address fetched via ifconfig.me, then transmits them as query-string...

Malicious code in cdf-tag-commander-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945179057c5bd93b985c3c532baa35379ce9dd9603e26d17e63201beb25868ae The preinstall lifecycle script in [email protected] runs automatically on npm install. It executes whoami and hostname, retrieves the...

MAL-2026-13481 Malicious code in cdf-tag-commander-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945179057c5bd93b985c3c532baa35379ce9dd9603e26d17e63201beb25868ae The preinstall lifecycle script in [email protected] runs automatically on npm install. It executes whoami and hostname, retrieves the...

Malicious code in @cats-cdf/authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404569337a1e5fc46fff2584e052d2f9f99c3cb8d04e5fb3b5c5d633c178e01c The package's preinstall lifecycle script runs on npm install and collects the installer's local username whoami, hostname, and public IP address...

MAL-2026-13479 Malicious code in @cats-cdf/browser-metrics-meter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83df5c7e17dd2b9a808bddee17deb157e88a12632a632177f7969fce9ccfa7a8 The package's preinstall lifecycle script runs automatically on npm install and executes whoami and hostname, then fetches the machine's public IP fr...

MAL-2026-12043 Malicious code in sextant-cli-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34f69b5a68c549feccfb32cc2dbfbf2d4c787a4876241027b4299305fd2c53 The package is a platform-specific leaf linux/arm64 whose only shipped artifact is a 12 MB stripped Go binary at bin/sxt. The package.json omits...

Malicious code in syft-acp-util (npm)

The syft-acp-util package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

Malicious code in syft-acp-core (npm)

The syft-acp-core package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

Malicious code in @edgecommons/streamlog-node (npm)

The @edgecommons/streamlog-node package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

Malicious code in syft-acp-uikit (npm)

The syft-acp-uikit package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

MAL-2026-10765 Malicious code in syft-acp-core (npm)

The syft-acp-core package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

Malicious code in syft-acp-atoms (npm)

The syft-acp-atoms package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

Malicious code in @espn-ping/react-dmed-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...

MAL-2026-10401 Malicious code in @espn-ping/react-dmed-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...

Malicious code in @db-tools/main-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3b0edc39a389f4099895c647f0cdccbb08c85e56835670468e7a989b172e9f package.json declares a preinstall hook npm install @sentry/node && node examples/verify.js that fires on every npm install. examples/verify.js calls...

Malicious code in chat-adapter-zoom (npm)

The chat-adapter-zoom package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a Zoom...