attesor

Rosetta 2 Reverse Engineering Project A comprehensive reverse-engineering effort to understand and document Apple's Rosetta 2 binary translation technology. Table of Contents 1. Background 2. What is Rosetta? 3. What is Rosetta 2? 4. How Apple Delivers Rosetta 2 in macOS 5. Technical Architecture...

rosetta-squint-decode (1.0.0) potentially affected by CVE-2026-84449 via libheif-js (1.17.1)

libheif-js NPM version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on libheif-js and may be impacted: - rosetta-squint-decode 1.0.0 Source cves: CVE-2026-84449 Source advisory: MEND:CVE-2026-84449...

@agimon-ai/imagine-mcp (>=0.6.0, <=0.30.14), rosetta-squint-decode (1.0.0) potentially affected by CVE-2026-84447 via libheif-js (>=1.17.1, <=1.19.8)

libheif-js NPM version =1.17.1, =0.6.0, =0.30.14 - rosetta-squint-decode 1.0.0 Source cves: CVE-2026-84447 Source advisory: MEND:CVE-2026-84447...

@agimon-ai/imagine-mcp (>=0.6.0, <=0.30.14), rosetta-squint-decode (1.0.0) potentially affected by CVE-2026-84448 via libheif-js (>=1.17.1, <=1.19.8)

libheif-js NPM version =1.17.1, =0.6.0, =0.30.14 - rosetta-squint-decode 1.0.0 Source cves: CVE-2026-84448 Source advisory: MEND:CVE-2026-84448...

Malicious code in i2g-rosetta (npm)

--- Credit: OpenSSF source...

ims-mcp (>=2.0.16b1, <=3.0.5), mineru-flow (>=1.0.0a1, <=1.0.0a4) +2 more potentially affected by CVE-2026-75898 via ragflow-sdk (>=0.21.1, <=0.25.6)

ragflow-sdk PYPI version =0.21.1, =2.0.16b1, =1.0.0a1, =2.0.12, =2.0.16b1, =3.0.5 Source cves: CVE-2026-75898 Source advisory: MEND:CVE-2026-75898...

MAL-2025-21071 Malicious code in fusion-plugin-rosetta (npm)

The package fusion-plugin-rosetta was found to contain malicious code...

Malicious code in fusion-plugin-rosetta (npm)

The package fusion-plugin-rosetta was found to contain malicious code...

MAL-2025-5081 Malicious code in i2g-rosetta (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in i2g-rosetta (npm)

--- -= Per source details. Do not edit below this line.=-...

Malware in rosetta-primitives

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in rosetta-elements

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4614 Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rosetta-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066c537cf24b296d35abde5f38191e4f60c82f7bd0583997251e70bdb2c21052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4613 Malicious code in rosetta-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066c537cf24b296d35abde5f38191e4f60c82f7bd0583997251e70bdb2c21052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

rosettastone.eu Cross Site Scripting vulnerability OBB-3316901

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rosetta-wt.at Cross Site Scripting vulnerability OBB-2435954

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Experts Detail Logging Tool of DanderSpritz Framework Used by Equation Group Hackers

Cybersecurity researchers have offered a detailed glimpse into a system called DoubleFeature that's dedicated to logging the different stages of post-exploitation stemming from the deployment of DanderSpritz, a full-featured malware framework used by the Equation Group. DanderSpritz came to light...

Apple Silicon Support on Insight Agent

We are pleased to announce the general availability of native support of Apple Silicon chips for the Rapid7 Insight Agent! The Insight Agent has been fully validated and tested to run on the new Apple Silicon systems natively, and does not require Rosetta 2 to install or operate. This ensures...