CVE-2026-89174

creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:20+00:00| seen| https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html 2026-09-11 11:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o 2026-09-11 12:01:56+00:00| seen|...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed a use-after-free in twtimerhandler A real-world panic issue was discovered in Linux 5.4. The details of the issue are as follows: - Bug: Unable to handle a page fault for the address: ffffde49a863de28 - Memory layout:...

MAL-2026-14062 Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: chainctl, cg, tw...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: rancher-fleet, manifest-tool, trivy-operator-fips, kots, argo-cd-fips, consul-k8s-fips, rancher-agent, helm-set-status, gatekeeper, chartmuseum, helm-exporter-fips, kubescape-server-fips, gitlab-operator-fips, tigera-operator-fips, kube-arangodb-fips, k8ssandra-clien...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-push, kots, helm-operator, pluto, eksctl, chart-testing, k9s, kubescape, flux-source-controller, cluster-api-helm-controller, zot, flux, cert-manager-cmctl, flux-helm-controller, helm-docs, k8ssandra-client, rancher-helm, zarf, cilium-cli, trivy, chartmuseum, tw...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: helm-push, kots, helm-operator, pluto, eksctl, chart-testing, k9s, kubescape, flux-source-controller, cluster-api-helm-controller, zot, flux, cert-manager-cmctl, flux-helm-controller, helm-docs, k8ssandra-client, rancher-helm, zarf, cilium-cli, trivy, chartmuseum, tw...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-push, rancher-fleet, kots, helm-operator, pluto, eksctl, k8sgpt, chart-testing, k9s, istio, flux-source-controller, cerbos, cluster-api-helm-controller, kargo, zot, cert-manager-cmctl, flux-helm-controller, helm-docs, k8ssandra-client, rancher-helm, zarf,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, loki, nfpm, terraform-provider-acme, kine, containerd, crossplane-provider-aws-lambda, wal-g, caddy, crossplane-provider-family-azure, crossplane-provider-aws-ec2, kubescape, crossplane-provider-aws-memorydb, terraform-provider-tls, istio, kargo, zot, flux,...

MAL-2026-6508 Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, crossplane-provider-gcp-beta-container, neuvector-scanner, plugin-barman-cloud, external-secrets-operator, kubernetes-fips, consul-k8s-fips, opensearch-datasource-fips, gcsfuse,...

MAL-2026-5935 Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Malicious Package

Overview tw-fluid-type is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-5638 Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Malicious Package

Overview @tw-marionette/clipboard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...