Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The package, named "tw-pkgprobe-7731," w...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed a use-after-free in twtimerhandler A real-world panic issue was discovered in Linux 5.4. The details of the issue are as follows: - Bug: Unable to handle a page fault for the address: ffffde49a863de28 - Memory layout:...

CVE-2026-89176

creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:23+00:00| seen| https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html 2026-09-11 09:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m 2026-09-11 11:00:49+00:00| seen|...

CVE-2026-89174

creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:20+00:00| seen| https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html 2026-09-11 11:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o 2026-09-11 12:01:56+00:00| seen|...

CVE-2026-82181

creationtimestamp| type| source ---|---|--- 2026-09-01 00:45:03+00:00| seen| https://www.twcert.org.tw/en/cp-139-11128-8bd30-2.html...

Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

MAL-2026-14062 Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw, chainctl, cg...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: conftest-fips, oras-fips, cloudbeat, k9s-fips, redpanda-operator, k9s, trivy-operator, cloudbeat-fips, commercial-kyverno, kubescape-server-fips, rancher-fleet-fips, maru, linkerd2, cilium-cli, headlamp-fips, oras, kube-arangodb, kgateway-fips, argo-cd-fips,...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: flux, rancher-helm, helm-operator, kots, tw, flux-helm-controller, chartmuseum, zarf, chart-testing, k8ssandra-client, helm-push, cluster-api-helm-controller, cilium-cli, eksctl, helm-docs, trivy, flux-source-controller, pluto, cert-manager-cmctl, zot, kubescape, k9s...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux, rancher-helm, helm-operator, kots, tw, flux-helm-controller, chartmuseum, zarf, chart-testing, k8ssandra-client, helm-push, cluster-api-helm-controller, cilium-cli, eksctl, helm-docs, trivy, flux-source-controller, pluto, cert-manager-cmctl, zot, kubescape, k9s...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-helm, helm-operator, kots, linkerd2, tw, flux-helm-controller, chartmuseum, k8sgpt, zarf, chart-testing, k8ssandra-client, kargo, helm-push, cluster-api-helm-controller, cilium-cli, cerbos, eksctl, helm-docs, trivy, istio, flux-source-controller, pluto,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux, datadog-agent, scorecard, ko, nfpm, trivy-operator, gh, rootlesskit, atlantis, argo-events, go-discover, kyverno, act, crossplane-provider-aws-sns, policy-controller, spire-server, cosign, crossplane-provider-aws-s3, crossplane-provider-aws-firehose, eksctl,...

PT-2026-71993

Name of the Vulnerable Software and Affected Versions Grav API plugin getgrav/grav-plugin-api versions prior to 1.0.13 Description An API key scope-cap bypass exists in the guardTwigContent function within PagesController. The issue occurs because the Twig-toggle check relies on a basic...

MAL-2026-6508 Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-bedrockagent-fips, newrelic-infrastructure-agent, opensearch-datasource-fips, crossplane-provider-aws-emrserverless, distribution, aws-ebs-csi-driver-fips, commercial-kyverno, argo-workflows, percona-backup-mongodb-fips,...

MAL-2026-5935 Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...