Malicious code in strapi-plugin-workspace-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f06861421eccfdc69a5f18ecfe67b3785cb24bb1b0d1e6dd3f5d65df20f20 The package strapi-plugin-workspace-plugin was found to contain malicious code. Source: ghsa-malware...

CVE-2026-33066

creationtimestamp| type| source ---|---|--- 2026-03-17 00:49:21+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4663-4mpg-879v 2026-03-20 09:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiawcd5np27 2026-04-17 03:38:28+00:00...

CVE-2026-32811

creationtimestamp| type| source ---|---|--- 2026-03-16 21:38:21+00:00| published-proof-of-concept| https://github.com/dadrus/heimdall/security/advisories/GHSA-r8x2-fhmf-6mxp 2026-03-20 04:46:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhhpjmrfhd2x 2026-03-30 16:20:09+00:0...

CVE-2025-71106

creationtimestamp| type| source ---|---|--- 2026-03-16 08:05:20+00:00| seen| https://gist.github.com/joxd11222/1058f2b3d98f53fdb469fe874745a6ee...

Malicious code in @myisrfn/baileys-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc229f53299b669d5c48d802a9d0a7766546ae0908e4b83ed04c51d34c97e482 The package @myisrfn/baileys-mod was found to contain malicious code. Source: ghsa-malware...

Malicious code in prefer-let (npm)

The package 'prefer-let' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.com...

Malicious code in monorepo-cop (npm)

The package 'monorepo-cop' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.com...

MAL-2026-1556 Malicious code in yoshi-base (npm)

The package 'yoshi-base' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.com...

MAL-2026-1555 Malicious code in typescript-vue-apollo-smart-ops (npm)

The package 'typescript-vue-apollo-smart-ops' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

MAL-2026-1388 Malicious code in tourney-sdk-react (npm)

The package exfiltrates system data to remote server --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5364bf5b440c1fcec66cbe29b7243db3661868744f68aebeb5f8b99619d950 The package tourney-sdk-react was found to contain malicious code. Source: ghsa-malware...

CVE-2023-5652

creationtimestamp| type| source ---|---|--- 2026-03-12 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd3jmx52q...

CVE-2022-30425

creationtimestamp| type| source ---|---|--- 2026-03-12 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd3cbxn2m...

CVE-2026-1525

creationtimestamp| type| source ---|---|--- 2026-03-12 20:40:20+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mgvb3e3qw22f...

CVE-2026-32269

creationtimestamp| type| source ---|---|--- 2026-03-12 19:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32269...

MAL-2026-1372 Malicious code in @sky-it-livedata-libraries/livedata-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bdbc3cff45e6eac27e84e332d4efa6ad06a4d593b15610a99115bac25d2931 The package @sky-it-livedata-libraries/livedata-commons was found to contain malicious code. Source: ghsa-malware...

Detecting and analyzing prompt abuse in AI tools

This second post in our AI Application Security series is all about moving from planning to practice. AI Application Series 1: Security considerations when adopting AI tools established how AI adoption expands the attack surface and our threat-modelling guidance on the Microsoft security blog...

CVE-2026-0230

creationtimestamp| type| source ---|---|--- 2026-03-12 03:00:11+00:00| seen| https://security.paloaltonetworks.com/CVE-2026-0230 2026-03-12 14:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkxppx22k 2026-03-12 15:08:38+00:00| seen|...

Malicious Package

Overview praxis-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-20074

creationtimestamp| type| source ---|---|--- 2026-03-11 16:37:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116211519204223592 2026-03-12 03:00:09+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isis-dos-kDMxpSzK 2026-03-12...

GO-2026-4592 SiYuan's direct SQL Query API accessible to Reader-level users enables unauthorized database access in github.com/siyuan-note/siyuan/kernel

SiYuan's direct SQL Query API accessible to Reader-level users enables unauthorized database access in github.com/siyuan-note/siyuan/kernel...