Malicious code in quasitonnts (PyPI)

Source: kam193 6b73744742a9129ba02b40242325d596780af7d8e456c7040e8458d29c125540 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in pyrechoasr (PyPI)

Source: kam193 abd16e8f67cf00b05cd9b944eaae2569a33cd419f50b3df499f203ea838fc447 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in tonemaptts (PyPI)

Source: kam193 19491cfac57ebbc5106857c286eb420bb2c84f246781670579fc4311cb7d1cad The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in voltswannts (PyPI)

Source: kam193 5fa306d5f7de491546822f6b026c35cc395d7d379258b7a8382b50468ce708b2 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in ukraine69 (PyPI)

Source: kam193 751255a551e996471674b44aea1cac8c92313caeaf22bb1584c96e4be5036b5a During import, package performs actions intended to escape sandbox, find Telegram-bot session files and initiate malicious account deletion. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in emberlytts (PyPI)

Source: kam193 c53182f7339fc139b58f28bdd6588e55eb25c1c6d07089f6fc57b87f8339f547 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in driftwavets (PyPI)

Source: kam193 e69baa6a16626f26b6f71e04ce89a53a693a06c6545446a9addbecfd6c95d92f The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in glassbeakasr (PyPI)

Source: kam193 de05a7ca1743ea6c3ceba4abc7f5452783d567b39f20007aeb57071a6d4019ed The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in novalithtts (PyPI)

Source: kam193 4d136563fb3f5bd0febb4dc01f0af8d3ce9638271f1416f814d126fb49239840 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malware in itsa-react-maskedinput

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in itsa-react-focuscontainer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

Summary A user holding the delegated users:update permission can reset the global administrator's password and take over the admin account. UpdateUser sets the target user's PasswordHash from the request body for ANY target with no comparison of caller-vs-target privilege. Because role assignment...

Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`

Summary Arcane v2.10.2 contains an authorization inconsistency in AuthMiddleware.managerAuth. When a request supplies a valid environment access token through the X-Arcane-Agent-Token header, managerAuth resolves the associated environment, installs an environment-scoped permission set, and...

LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport

Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport Details LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. T...

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

Summary ValidateResponse panics on a nil pointer when a spec declares a response header with content instead of schema. doc.Validate accepts that document, so the crash comes from a spec the library just called valid. Same class as GHSA-jpcw-4wr7-c3vq, which covered the request-parameter case in...

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Summary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite that file by hard-linking it into another preopen that allows file writes. An attacker who can run a WASI guest can bypass WasiCtxBuilder per-preopen FilePerms and modify host files th...

lopdf has a stack overflow via deeply nested PDF objects

lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...

JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS

Summary IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response these streams ar...

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag. An attacker who controlled the resume value could inject an --mcp-config flag defining a stdio MCP server, resulting in...

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8sexternal transferer can emit an empty...

ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

Summary The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to...

swoosh has email-derived URL path injection in Microsoft Graph endpoint

Summary Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address from untrusted or user-influenced input a...

ClickMigrate has Path Traversal in "revision -m" argument

Impact A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory. Under specific conditions, an attacker could cause the tool to create a .sql file in an arbitrary location writable by the user...

Malware in @beloved-lenora/opencode-shared-rpc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @beloved-lenora/opencode-todo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @beloved-lenora/opencode-stats

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @beloved-lenora/opencode-btw

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @beloved-lenora/opencode-orchestrator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @beloved-lenora/opencode-goal

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @beloved-lenora/opencode-shell-guard

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

gomarkdown/markdown IsSafeURL panics on short URLs

Summary IsSafeURL slices url:nPath before checking that lenurl = nPath, so a URL shorter than a path prefix 0, 1 or 2 bytes triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening flag is enabled and the input contains an empty or very short link destination...

Malware in @xatancchii/natabaileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in parxleys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in marocolor (PyPI)

Source: kam193 38b0fa2ee77af46ad9daf78c024a0f599fd0798eef7605cb3eed50d8db65fa22 Package is intended for stealing files to a hardcoded location and performing a DoS on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in fromthehotel-poems (PyPI)

Source: kam193 bf72dad3e2f32ee2e66a3a5ee5642b4a20a9fb9458fcd677f6250b1e4b805906 One of the provided functions hides executing remote code from a newly created domain. During analysis, the remote code did not contain any malicious action. The description and other endpoints clearly suggest it's an...

Malicious code in @flexmr/survey-client (npm)

Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to https://artifacts.creditslib.com/npm/marker-index-symbol-schema instead of a registry version...

Malicious code in @flexmr/survey-conversation (npm)

Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL https://artifacts.creditslib.com/npm/cache-format-syntax-tracer rather than a registry version range. On npm install,...

Malicious code in web-pixels-manager (npm)

[email protected] describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value 207e4133bd083b9e3e89c5556fc8677e, which differs from the...

Malicious code in idlive-face-capture-web-development (npm)

[email protected] describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value a3b620ea8719eae2fa9b62726364bcc9, which...

Malicious code in xapi-lib (npm)

[email protected], 88.2.5, 90.2.1, and 90.3.1 describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value fa79878bc2cfb48bd5127ae26fb661b1, which i...

Malicious code in buyerdashboard (npm)

[email protected] describes itself as "User dashboard IP info". Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value 8eb5e8641a5795b022d68e14d8858415, which differs from the value in each of the account...

Malware in bungoma

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in xmd-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @developmentyora/yorakids

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @developmentyora/baileyss

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in kiyoramarkets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in asistenyorstore

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @celestial-community/baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @flexmr/utils (npm)

Source: ossf-package-analysis fc751fb286e3a288e498adfc3b9b936c1ff40270a1c342047a7d778ce24936f4 The OpenSSF Package Analysis project identified '@flexmr/utils' @ 3.0.12 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in proxyrobika (PyPI)

Source: kam193 ca9520dcc3936b679b577bee42392ecb6ee65cd658c4858d325de5c738a7a200 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons based on the campaign: -...