250383 matches found
Malicious Package
Overview totp-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.170 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...
ROOT-OS-DEBIAN-11-CVE-2026-34743 CVE-2026-34743 in xz-utils - Patched by Root
Root has patched CVE-2026-34743 in the xz-utils package for Root:Debian:11. Multiple fixed versions available...
notevault-vapt-assessment
Black-Box VAPT Assessment — NoteVault A self-contained, repro...
Malicious Package
Overview solidity-testing-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious Package
Overview totp-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview rust-testing-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in 3-buildsight-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2d8b62e8d6f475efc170e1f26783037acc358eac7f32153110f29ecb415545 The package's main entry contains a top-level IIFE that runs on module load and fetches content from a hardcoded Bitbucket raw URL,...
MAL-2026-14364 Malicious code in 3-buildsight-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2d8b62e8d6f475efc170e1f26783037acc358eac7f32153110f29ecb415545 The package's main entry contains a top-level IIFE that runs on module load and fetches content from a hardcoded Bitbucket raw URL,...
Malicious code in 6-viewsight-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96501ebb5a5bb3858767545e256cdcfd23f164f4435c109d206f421771ce6e68 The package's main module is a self-executing IIFE that fetches HTML from https://bitbucket.org/p2p-alt-public/p2p-emis/raw/main/GameWebSight and...
MAL-2026-14365 Malicious code in 6-viewsight-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96501ebb5a5bb3858767545e256cdcfd23f164f4435c109d206f421771ce6e68 The package's main module is a self-executing IIFE that fetches HTML from https://bitbucket.org/p2p-alt-public/p2p-emis/raw/main/GameWebSight and...
Malicious code in @syncraft-labs/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3986bd05347035d9263c22b871840f19dc42187d3e1719311cb67c6e1ef5cb9 dist/index.js the ESM entry resolved by default by modern bundlers such as Vite, Next.js, and Webpack contains a heavily obfuscated block using...
MAL-2026-14368 Malicious code in @syncraft-labs/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3986bd05347035d9263c22b871840f19dc42187d3e1719311cb67c6e1ef5cb9 dist/index.js the ESM entry resolved by default by modern bundlers such as Vite, Next.js, and Webpack contains a heavily obfuscated block using...
MAL-2026-14369 Malicious code in @syncraft-labs/vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...
Malicious code in @syncraft-labs/vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...
Malicious code in @syncraft-labs/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efe219063a966d0d2025d6c3274cbc7e9f3c0b3a1e9cdf81c7adf6dbae4d4ac The ESM build shipped at dist/index.js contains a heavily obfuscated payload hex-identifier string-array + rotator produced by an obfuscator.io-style...
MAL-2026-14367 Malicious code in @syncraft-labs/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efe219063a966d0d2025d6c3274cbc7e9f3c0b3a1e9cdf81c7adf6dbae4d4ac The ESM build shipped at dist/index.js contains a heavily obfuscated payload hex-identifier string-array + rotator produced by an obfuscator.io-style...
Malicious code in chai-as-testkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf8ab4a811449bd1ba40c637a0eebc0569994d3a3550cf7156c36192abcec31 The package is published as 'chai-as-testkit' with a description referencing vulnerability management, but the tarball ships pino's README, docs/,...
MAL-2026-14371 Malicious code in chai-as-testkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf8ab4a811449bd1ba40c637a0eebc0569994d3a3550cf7156c36192abcec31 The package is published as 'chai-as-testkit' with a description referencing vulnerability management, but the tarball ships pino's README, docs/,...