42860 matches found
Malicious code in @redhat-cloud-services/frontend-components-remediations (npm)
Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...
Malicious code in @redhat-cloud-services/types (npm)
Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...
Malicious Package
Overview Sicoob-Cooperativa.Sicoob.Investimentos is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
Exploit for CVE-2026-8836
CVE-2026-8836 — lwIP SNMPv3 Stack Overflow PoC Proof of conce...
CVE-2026-39821 affecting package kured for versions less than 1.15.0-5
CVE-2026-39821 affecting package kured for versions less than 1.15.0-5. A patched version of the package is available...
CVE-2026-39835 affecting package packer for versions less than 1.9.5-14
CVE-2026-39835 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
GHSA-5699-PPR6-8H44 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-33381 vulnerabilities
Vulnerabilities for packages: grafana...
GHSA-3R2P-7499-27Q3 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
CVE-2026-28374 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
GHSA-29P4-5443-X453 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
Linux Distros Unpatched Vulnerability : CVE-2026-47761
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can inject...
Linux Distros Unpatched Vulnerability : CVE-2026-44421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP...
MAL-2026-5073 Malicious code in midoss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73bce73a188c2742f2c66ec85906c0bea50468d8c606fd6d38d4ea5698119007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ethers-contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71fb8c3fc53908b6c1f910ca98b3940ded0c9acc55112925833e60a64816510d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ota_web_admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2724185590a9671481ff3ac84c4046cb7b1841b78c7872660ff5ddf32fc21309 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-5080 Malicious code in tailwind-clamps-line (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 091842cb2bfe94e715b2bfec88b04625ea3350097c037d2b172483905633c20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in foundry-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4918af978c72d6459e02a9d0b1114f54cde7f3973b1cc3f61b497a0575269592 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-5049 Malicious code in @lir-portal/web-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6cc9f2fe6ad0219df5db208b736cb45305b7e7062ec9d66a3316427e050989f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...