HackerOne: HackerOne Code: a live password reset token reaches Datadog RUM, and the same session records the account it unlocks

A password reset token was transmitted to a real user monitoring service before the reset form was submitted. The token was passed as a query string parameter in the URL and recorded by the monitoring SDK without any redaction. The same monitoring session also captured the account identifier afte...

CVE-2026-16032 LWS Optimize < 4.1.2 - Unauthenticated Stored XSS via Real User Monitoring

The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when an...

MAL-2026-11850 Malicious code in @servicetitan/datadog-rum (npm)

npm/@servicetitan/datadog-rum is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

FullStory RUM - Detect

Detects FullStory Session Replay & Digital Experience Intelligence artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FullStory Session Replay & Digital Experience Intelligence artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Datadog Browser RUM - Detect

Detects Datadog Browser RUM Real User Monitoring SDK artifacts in HTML responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Datadog Browser RUM Real User Monitoring SDK artifacts in HTML responses.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

LogRocket RUM - Detect

Detects LogRocket Session Replay & Frontend Monitoring artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects LogRocket Session Replay & Frontend Monitoring artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Matomo (Piwik) RUM - Tech Detect

Detects Matomo formerly Piwik Web Analytics & RUM artifacts. Identifies Standard Tracking, Image Tracking, Tag Manager, and Cloud instances using strict matching. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Matomo formerly Piwik Web Analytics & RUM artifacts.""" import re from kittysploi...

Hotjar RUM - Detect

Detects Hotjar Web Analytics & Session Recording artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hotjar Web Analytics & Session Recording artifacts.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Dynatrace RUM - Tech Detect

Detects Dynatrace Real User Monitoring RUM and OneAgent artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Dynatrace Real User Monitoring RUM and OneAgent artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

PostHog Browser RUM - Detect

Detects PostHog Product Analytics & RUM Real User Monitoring SDK artifacts in HTML responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PostHog Product Analytics & RUM Real User Monitoring SDK artifacts in HTML responses.""" import re from kittysploit import from...

Raygun RUM - Detect

Detects ACTIVE Raygun Raygun4JS Error Tracking & Real User Monitoring implementations. !/usr/bin/env python3 -- coding: utf-8 -- """Detects ACTIVE Raygun Raygun4JS Error Tracking & Real User Monitoring implementations.""" import re from kittysploit import from lib.protocols.http.httpclient import...

New Relic Browser Monitoring (RUM) - Tech Detect

Detected New Relic Browser Monitoring RUM agent artifacts !/usr/bin/env python3 -- coding: utf-8 -- """Detected New Relic Browser Monitoring RUM agent artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'New...

AppDynamics (Cisco) RUM - Detect

Detects AppDynamics Cisco End User Monitoring EUM artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AppDynamics Cisco End User Monitoring EUM artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

OpenReplay RUM - Tech Detect

Detects OpenReplay formerly Asayer Session Replay & RUM SDK implementation. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OpenReplay formerly Asayer Session Replay & RUM SDK implementation.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Malicious Package

Overview rum-events-format is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-192417 Malicious code in rum-events-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a17ba09614cd69d096859385577957b2737a3dce290dda9712c51fd7179c5 The package rum-events-format was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-202375

Malicious code in rum-events-format npm...

Malicious code in rum-events-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a17ba09614cd69d096859385577957b2737a3dce290dda9712c51fd7179c5 The package rum-events-format was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48988 Malicious code in bernie-plugin-datadog-rum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0197846dec97a3a236eb5ede3d773adb5c175e3a2e0a497138424270d1610d9a The package bernie-plugin-datadog-rum was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview bernie-plugin-datadog-rum is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...