mcp-shark

mcp-shark Security scanner for AI agent tools — built for security and platform engineers working with MCP in the IDE. Run a local static scan over MCP IDE configs and embedded tool metadata: 41 rules including AAuth visibility, toxic-flow heuristics, and SARIF / HTML / JSON reports. There is no...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Added endpoint checks The syzbot fuzzer was able to trigger a WARNING message from the radio-shark2 driver: ------------ Cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 327...

Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...

MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under th...

CVE-2026-7378 Heap-based Buffer Overflow in Wireshark

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013315 advisory. In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the...

EUVD-2025-117491

Malicious code in clean-brown-shark npm...

EUVD-2025-117174

Malicious code in partial-violet-shark npm...

Malicious code in essential_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386390d5513fb827f59c669c718ed3172a88a87402ed0986115090f995a2771d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101896

Malicious code in technicalsharkz3n npm...

EUVD-2025-96431

Malicious code in modestsharkz3n npm...

EUVD-2025-105991

Malicious code in convincedsharkz3n npm...

EUVD-2025-104469

Malicious code in intimatesharkz3n npm...

MAL-2025-116405 Malicious code in planned_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75347

Malicious code in unitedshark-silentdev npm...

MAL-2025-102442 Malicious code in extraordinary_shark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5b0bce6174edf07be05cb6c03e0200d469ac30d6d32c9b9ee0c15934e3ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...