xz-cve-2024-3094

Análise Técnica do CVE-2024-3094: O Backdoor na Cadeia de Suprimentos do XZ Utils Autor Dorpe Karl Seyram Data 2026-01-25 Contexto O objetivo deste projeto é analisar uma vulnerabilidade real, moderna e de alto impacto CVE-2024-3094 da perspectiva de um Engenheiro de Segurança / Equipe Azul. Em v...

lab_xz_backdoor

XZ Backdoor Labs CVE-2024-3094 Laboratori sicuri e pratici per comprendere la backdoor della supply chain di xz-utils — realizzati per difensori, studenti e blue team. !WARNING Questo progetto gestisce malware reale, in-the-wild la backdoor della xz 5.6.0 / 5.6.1. È fornito esclusivamente per...

MAL-2026-10539 Malicious code in postcss-animatecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfcae16a606f0b7eccb6cd94c1d1d0b583b19021bb15d04161f3ca8855aba61 The exported PostCSS plugin factory in [email protected] contains an obfuscator.io-obfuscated payload that executes on every consumer build...

MAL-2026-10206 Malicious code in nullrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ebce322ac712405bfd29254cbd8f820c20ddc083587693a982b75ef6f3039a Package advertises itself as an SVG fetcher/sanitizer but its main module also exports an undocumented getPlugin function. The returned function...