MAL-2026-17851 Malicious code in yoodan-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ec21b694320e65a8b1f38838f14f00ed00b3b1e4f6a5d6aeef960f900d1d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview yoodan-github-single-ver-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in yoodan-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ec21b694320e65a8b1f38838f14f00ed00b3b1e4f6a5d6aeef960f900d1d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in yoodan-github-single-ver-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in kartyk-github-single-ver-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-16245 Malicious code in kartyk-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc583cefb03bc649c96d2e8b48cc2bd5d73d8f6c489ded9b46c217ba1f212ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kartyk-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc583cefb03bc649c96d2e8b48cc2bd5d73d8f6c489ded9b46c217ba1f212ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview kartyk-github-single-ver-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in hdc-cuevana3-ant-man-and-the-wasp-quantumania-ver-cuevana-en-esphanol-latino (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana-3-ver-john-wick-4-2023-descargar-la-pelicula (npm)

--- Credit: OpenSSF source...

Malicious code in cue-vana-3-john-wick-4-iv-2023-ver-en-espanol-latino-descargar-la-pelicula-completa-esp127456 (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana-3-ver-john-wick-4-2023-des-cargar-la-peliculao-completa (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana-3-free-ver-john-wick-4-completa-en-espanol-gratis-latino (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana-3-ver-john-wick-4-2023-peliculas-completas-en-espanol-ol-pelisplus-repelis-latin (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana-3-ver-john-wick-4-2023-pelicula-completa-en-espanol-y-latino (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana-3-ver-john-wick-4-pelicula-completa-en-espanol-y-latino (npm)

--- Credit: OpenSSF source...

Malicious code in cuevana3-ver-john-wick-4-la-pelicula-completa-online-gratis4k (npm)

--- Credit: OpenSSF source...

Malicious code in check-deps-ver-consistency (npm)

--- Credit: OpenSSF source...

Malicious code in check-dependency-ver-consistency (npm)

--- Credit: OpenSSF source...

CVE-2026-49843 FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, modverto's JSON-RPC handler bound the connection to the client-supplied sessid on the fir...