Malicious code in hardhat-bits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e10f22980d33eea7649312f6b2b0a94637e5b4da400f7d585c58b6902a77944 The package is published as hardhat-bits but its README, LICENSE, docs/, and lib/ files are copied verbatim from the pino logger project, providing...

MAL-2026-17658 Malicious code in hardhat-bits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e10f22980d33eea7649312f6b2b0a94637e5b4da400f7d585c58b6902a77944 The package is published as hardhat-bits but its README, LICENSE, docs/, and lib/ files are copied verbatim from the pino logger project, providing...

Malicious code in chai-as-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97806af0cd2e189771ef929999ea4b1812c7933b87dbaf2a2a9b7e6815bce36c The package's index.js unconditionally requires./lib/config, which is a 4MB single-line file consisting of an obfuscator.io-style hex-encoded string...

MAL-2026-6322 Malicious code in ts-predict-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efbafcedfb49da5093c3972473a549694dd9dd748281a299034c31578db1943 Package is published as ts-predict-helper but ships a byte-equivalent copy of big.js v7.0.1's source and README which states 'No dependencies', along...

glibc: ldd unexpected code execution issue

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...