Malicious code in @engagehub/test-claim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab727c7412637f0d9a8b0eeb15d022a379de2eee3e10a30ad80b923b07ad553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brunomenozzi-test-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06729f2b798e8015cdd50f9f6f1915a4d3ef45ebd8da4f67d9c8917fbf6188c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview brunomenozzi-test-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in smtp-test-server-node (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7422 Malicious code in smtp-test-server-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-chain-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7242 Malicious code in chai-chain-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7240 Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in southwark-test-f8e1778549558 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8848 Malicious code in southwark-test-f8e1778549558 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8836 Malicious code in southnews-test-35329 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in southnews-test-35329 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7601 Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7600 Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1168 Apache Superset has improper default REST API permission for Gamma users

An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections...

Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox

ImpactKiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introducedchanges which were meant to serve all uploaded files as plain text in order to prevent browsers from executing potentially dangerous files when such files are accessed...

Cross-site Scripting in kiwitcms

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack clickjacking and an HTML injection which disables the use of the history page...