17803 matches found
Malicious Package
Overview bunnyhijack-test-0x00 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview streak-metric-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview ssb-test-package is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
SummaryThe /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
PYSEC-2026-3684 ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
[SECURITY] [DLA 4706-2] ruby-grape regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 19, 2026 https://wiki.debian.org/LTS -...
Malicious code in ssb-test-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086e13ef78d9987210a95cc9e70359d982cd9dbffa59d674d6f5ed3cb8f8a725 [email protected] is a dependency-confusion proof-of-concept. package.json declares preinstall: node poc.js, and poc.js runs unconditionally on...
MAL-2026-14221 Malicious code in ssb-test-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086e13ef78d9987210a95cc9e70359d982cd9dbffa59d674d6f5ed3cb8f8a725 [email protected] is a dependency-confusion proof-of-concept. package.json declares preinstall: node poc.js, and poc.js runs unconditionally on...
Malicious code in streak-metric-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a07dcfac11a25f5e9074d867bee34fa01ba0926b30cb4c21f75a2787bdac77 [email protected] ships a fully wired dropper that fires on import/require of the package root. The top-level async IIFE in dist/index.mjs...
MAL-2026-14224 Malicious code in streak-metric-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a07dcfac11a25f5e9074d867bee34fa01ba0926b30cb4c21f75a2787bdac77 [email protected] ships a fully wired dropper that fires on import/require of the package root. The top-level async IIFE in dist/index.mjs...
Malicious code in @sidp-kiosk/test-npm-snurkeburk-hackerone (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a832d2eb4042899a17a745bac70590844ba320f3e181580314687c664e5159 The package's package.json declares a preinstall script that runs index.js automatically on npm install. index.js shells out via childprocess.exec to...
PT-2026-80656
Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
CVE-2026-53549: Server-Side Request Forgery (SSRF)
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...
MAL-2026-14141 Malicious code in test-npm-snurkeburk-hackerone (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397c2435e4a2a4b33ec6cc8e396eacfa099aea042b3da6e70d96d86ea53a460 The package's preinstall lifecycle hook runs node index.js, which shells out to collect installer host identifiers hostname, cwd, whoami and the...
Malicious code in @mohamed_nowisar/depconf-canary-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078a8dc3351eb44ee9ff0d5992b9082b726d7fbce0152ae2d44595a9e279ef82 On npm install, the package's preinstall hook runs node beacon.js, which collects host identity os.hostname, os.userInfo.username, process.cwd,...
MAL-2026-14134 Malicious code in @mohamed_nowisar/depconf-canary-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078a8dc3351eb44ee9ff0d5992b9082b726d7fbce0152ae2d44595a9e279ef82 On npm install, the package's preinstall hook runs node beacon.js, which collects host identity os.hostname, os.userInfo.username, process.cwd,...
CVE-2026-73974
linuxfabrik-lib (prior to 6.1.0) and Linuxfabrik Monitoring Plugins (prior to 7.0.0) contain an arbitrary root file-read vulnerability in the lib.lftest.test() helper. The hidden --test argument (mapped to argparse.SUPPRESS, invisible in --help but accepted at runtime) treats its first or second ...
GO-2026-6106 Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve...
