216 matches found
Malicious code in shark-e2e-bnsneo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...
MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide
Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under th...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Added endpoint checks The syzbot fuzzer was able to trigger a WARNING message from the radio-shark2 driver: ------------ Cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 327...
CVE-2026-7378 Heap-based Buffer Overflow in Wireshark
Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013315)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013315 advisory. In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the...
EUVD-2025-117491
Malicious code in clean-brown-shark npm...
EUVD-2025-117174
Malicious code in partial-violet-shark npm...
Malicious code in essential_shark_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386390d5513fb827f59c669c718ed3172a88a87402ed0986115090f995a2771d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-101896
Malicious code in technicalsharkz3n npm...
EUVD-2025-104469
Malicious code in intimatesharkz3n npm...
EUVD-2025-96431
Malicious code in modestsharkz3n npm...
EUVD-2025-105991
Malicious code in convincedsharkz3n npm...
MAL-2025-116405 Malicious code in planned_shark_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75347
Malicious code in unitedshark-silentdev npm...
Malicious code in husky_shark-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-102442 Malicious code in extraordinary_shark_replicate_automation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5b0bce6174edf07be05cb6c03e0200d469ac30d6d32c9b9ee0c15934e3ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-101142 Malicious code in cultural_shark-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...