MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under th...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Added endpoint checks The syzbot fuzzer was able to trigger a WARNING message from the radio-shark2 driver: ------------ Cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 327...

CVE-2026-7378 Heap-based Buffer Overflow in Wireshark

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013315 advisory. In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the...

EUVD-2025-117491

Malicious code in clean-brown-shark npm...

EUVD-2025-117174

Malicious code in partial-violet-shark npm...

Malicious code in essential_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386390d5513fb827f59c669c718ed3172a88a87402ed0986115090f995a2771d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101896

Malicious code in technicalsharkz3n npm...

EUVD-2025-96431

Malicious code in modestsharkz3n npm...

EUVD-2025-104469

Malicious code in intimatesharkz3n npm...

EUVD-2025-105991

Malicious code in convincedsharkz3n npm...

MAL-2025-116405 Malicious code in planned_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76888

Malicious code in extraordinarysharkreplicateautomation npm...

Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77184

Malicious code in culturalshark-appteadev npm...

EUVD-2025-75347

Malicious code in unitedshark-silentdev npm...

Malicious code in united_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04877d0d4a9d17642aaa72e6725d85a9d5811a6995139d5d9f67c803c5592ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103869 Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...