Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146125 advisory. A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service. Tenable has extracte...

emsign-trust-scan

emSign / eMudhra compromise - trust-store scanner Detection tooling for the October 2026 eMudhra / emSign intermediate CA private-key compromise. Eight intermediate CAs were issued with P-384 keys whose private scalars were tiny integers recovered values 4, 56, 66, 115, 155, 156, 230, 237, so...

MAL-2026-18308 Malicious code in @s4yhiitestpoc/scan-echo-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56326de32baad0d0d893359e14cf73b56e8139d714f3106fde0c24fdb4004091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18307 Malicious code in @s4yhiitestpoc/scan-dns-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb3c4b0863ee69937b926b58ee5255e26d0ab3737abd640b92956aef1ca03fb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @s4yhiitestpoc/scan-control-a

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/scan-https-dualuse-e

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/scan-https-d

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/scan-dns-c

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/scan-echo-b

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s4yhiitestpoc/scan-echo-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56326de32baad0d0d893359e14cf73b56e8139d714f3106fde0c24fdb4004091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18306 Malicious code in @s4yhiitestpoc/scan-control-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0a8c4d5ab871942d5301ffe7797ba35882108ed4f9195f5000f7e274455827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/scan-dns-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb3c4b0863ee69937b926b58ee5255e26d0ab3737abd640b92956aef1ca03fb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69b9998deea152d8088db89469ab4f8fa468d68e8cb923b25c7e91f8facf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/scan-control-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0a8c4d5ab871942d5301ffe7797ba35882108ed4f9195f5000f7e274455827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18309 Malicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69b9998deea152d8088db89469ab4f8fa468d68e8cb923b25c7e91f8facf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @s4yhiitestpoc/scan-control-a is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @s4yhiitestpoc/scan-https-dualuse-e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious Package

Overview @s4yhiitestpoc/scan-dns-c is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @s4yhiitestpoc/scan-echo-b is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Linux Distros Unpatched Vulnerability : CVE-2026-98889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mvm: fix sched scan IE sizing Scheduled scan built the probe request before iwlmvmscanfits, so oversized IEs could be copied into the fixed preq...