25099 matches found
MAL-2026-11073 Malicious code in @fazzcode/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1bff90cd31ad87a8cd76716c0c7fb23b148c5fa1d4ac226ce3ea10ebf70835 @fazzcode/baileys is a fork of @whiskeysockets/baileys that re-exports the upstream makeWASocket API while injecting an undocumented remote-controlle...
Malicious code in @fazzcode/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1bff90cd31ad87a8cd76716c0c7fb23b148c5fa1d4ac226ce3ea10ebf70835 @fazzcode/baileys is a fork of @whiskeysockets/baileys that re-exports the upstream makeWASocket API while injecting an undocumented remote-controlle...
Malicious code in @sqlite-tag/schema-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c0c9a31c77b90dcf433595d03bef3c4752075f134be6b4568dccf2751bc63d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11077 Malicious code in @sqlite-tag/sql-creator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a88585293f864e712b64feb436171caab5fc4d9c5d9d3509b2a0a67e04b6e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11075 Malicious code in @sqlite-frame/createsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fad23440ed1dfd9c57e3abc48d9ea51787f5788482dbcd70e852cadf5191986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sqlite-frame/createsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fad23440ed1dfd9c57e3abc48d9ea51787f5788482dbcd70e852cadf5191986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @my_name_is_khn/express-security-tool-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb45d8539214aba2ca98223064b29e9fac2199f766f7e44430ba9f9b4d2d622d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in express-self-destruct1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efe4bb7647313d9772c059e46a877ab095ada0910845e5605fbb317ab2b01fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11084 Malicious code in express-self-destruct1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efe4bb7647313d9772c059e46a877ab095ada0910845e5605fbb317ab2b01fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11074 Malicious code in @my_name_is_khn/express-security-tool-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb45d8539214aba2ca98223064b29e9fac2199f766f7e44430ba9f9b4d2d622d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-51235
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-65084
Name of the Vulnerable Software and Affected Versions LibRaw version 0.21 Description Buffer overflow occurs in the stretch function src/libraw cxx.cpp and the fuji rotate function src/decoders/fuji.cpp. Recommendations At the moment, there is no information about a newer version that contains a...
CVE-2026-51235
LibRaw 0.21 contains a buffer overflow in the stretch() and fuji_rotate() functions. Red Hat’s advisory states the issue is a vulnerability in the LibRaw library that could allow memory overwrite, potentially leading to denial of service or unauthorized code execution. Mitigation: avoid processin...
EUVD-2026-49396
LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/librawcxx.cpp and fujirotate function src/decoders/fuji.cpp...
Malicious code in app-node-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...
Malicious code in app-data-lts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9d67601ec8b46265e1f23f5e48ff5beb050626f4bc156b291cb1b8f8c36d35 package.json declares postinstall node test.js and main: index.js, but index.js is absent from the tarball. test.js executes require'.', which throws...
MAL-2026-11052 Malicious code in app-data-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc306d8463afd4c0baadf4af1627986a5cb136d516c71415957fa606150008bd Analysis of [email protected] 3 files scanned produced no static or traced findings. No lifecycle hooks fetching or executing remote content, no...
MAL-2026-11054 Malicious code in app-node-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...
Malicious code in eth-slint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bdbbc1ccc748bfe5ad640ed4e54ed5285a526a78a198ac2bf64727b7730d54d eth-slint is a typosquat of web3-core-subscriptions. src/index.js contains a clean 2119-byte copy of the legitimate web3.js subscriptions module, whi...