3518 matches found
PT-2026-42681
Name of the Vulnerable Software and Affected Versions FlaskBB affected versions not specified Description A Server-Side Request Forgery SSRF exists where authenticated users can force the server to send HTTP requests to arbitrary internal endpoints, such as cloud metadata services. This is a blin...
CVE-2026-9133
Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme arn:aws-debug:file accepted by the PUT /api/aws/arn/validate validation endpoint might allow remote authenticated users to perform arbitrary file reads on any file accessible to the...
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
In this article 1. Attack chain overview 1. Technical analysis 2. How GitHub took action to prevent further harm 2. Mitigation and protection guidance 1. Microsoft Defender XDR Detections 2. Microsoft Defender XDR Threat analytics 3. Advanced hunting 4. Indicators of Compromise IOC 3. References ...
Malicious code in @antv/async-hook (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-4033 Malicious code in @antv/l7 (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/dipper-map (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/x6-plugin-transform (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-3876 Malicious code in @antv/dw-random (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...
CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency CISA maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive...
CLEANSTART-2026-SW24654 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283 applied in versions: 3.2.1-r0
Multiple security vulnerabilities affect the aws-load-balancer-controller package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-31609 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...
CVE-2026-43100 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...
GHSA-463M-22HH-CHVM vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...
GHSA-RC8C-94M4-FRFH vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...
GHSA-H53C-6597-VMFW vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...
GHSA-JG3H-4JH8-MFWR vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...
GHSA-585P-9MG2-6VMM vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu...