Malicious code in @wagni_bot/wagni (npm)

The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...

PT-2025-40870

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A remote, unauthorized attacker can brute force folders and files and read them, potentially exposing sensitive information such as private keys or configurations. This allows for the gathering of...

CVE-2015-1985: Improper Access Control

The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file...