Malware in @s4yhiitestpoc/r3-https

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @s4yhiitestpoc/r3-https is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Wireshark 1.8.x < 1.8.5 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.5 advisory. - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows...

Malicious Package

Overview @s4yhiitestpoc/r3-https is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in @s4yhiitestpoc/r3-https (npm)

Source: amazon-inspector b2638f8970897121676d5dc3ed7c002ab9d9ccc3e400283e165297a95e3c1423 On npm install, postinstall.js automatically collects host identity hostname, username, uid/gid, homedir, platform, release, enumerates network interfaces addresses, MACs, CIDRs, reads DNS servers and intern...

Malicious code in @s4yhiitestpoc/r3-https (npm)

Dependency-confusion proof-of-concept package. A postinstall script runs automatically on installation and sends host and user identifiers hostname, username, home directory, network interface addresses, platform details and npm configuration to collector.oob.s4yhii.com, with a secondary DNS look...

MAL-2026-17765 Malicious code in @s4yhiitestpoc/r3-https (npm)

Dependency-confusion proof-of-concept package. A postinstall script runs automatically on installation and sends host and user identifiers hostname, username, home directory, network interface addresses, platform details and npm configuration to collector.oob.s4yhii.com, with a secondary DNS look...

Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.13 advisory. - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allo...

CLEANSTART-2025-GT80206 Security fix for GHSA-2xhq-gv6c-p224 applied in: metrics-server-fips 0.5.2-r3

Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XL99311 Security fix for GHSA-38f7-945m-qr2g applied in: jitsucom-jitsu 2.11.0-r3

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KU07150 Security fix for GHSA-q7rr-3cgh-j5r3 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RV38622 Security fix for GHSA-wmfp-5q7x-987x applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QA36813 Security fix for GHSA-5vv4-hvf7-2h46 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LZ10003 Security fix for GHSA-hvx9-hwr7-wjj9 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FG19009 Security fix for GHSA-9c88-49p5-5ggf applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CY64651 Security fix for GHSA-66ff-xgx4-vchm applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QG09459 Security fix for GHSA-75px-5xx7-5xc7 applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OM20895 Security fix for GHSA-jvwf-75h9-cwgg applied in: kibana 9.3.2-r3

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HC86648 Security fix for CVE-2026-42582 applied in: trino 480-r3

Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GX50966 Security fix for GHSA-w7vc-732c-9m39 applied in: airflow-2 2.11.0-r3

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...