Lucene search
+L
GithubRecent

163903 matches found

Github Security Blog
Github Security Blog
•added 2026/11/11 4:14 p.m.•2 views

Malware in netspeedutil

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:08 p.m.•3 views

Malware in selparsecss-selector

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 p.m.•3 views

Malware in file-type-detector

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 p.m.•3 views

Malware in gloglet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 p.m.•3 views

Malware in gloggo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 p.m.•2 views

Malware in chai-as-spy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 p.m.•3 views

Malware in verboset

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:05 p.m.•3 views

Malware in reactlogo-load

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:05 p.m.•3 views

Malware in aurelia-type

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:03 p.m.•3 views

Malware in helmify

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:03 p.m.•3 views

Malware in shraps

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:03 p.m.•2 views

Malware in express-helmet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:50 p.m.•4 views

Malware in ioredis-xyz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:49 p.m.•4 views

Malware in redis-type-xyz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:46 p.m.•5 views

Malware in oracle-redis

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:43 p.m.•2 views

Malware in ioredis-om-typed

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•3 views

Malware in csvbits

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in @tomhundley/prismdb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in jsonrail

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in textmark-engine

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in pathbits

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•3 views

Malware in taskpace

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in cronbits

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in @tomhundley/grafene

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•3 views

Malware in flowbits

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•3 views

Malware in @tomhundley/sparkdash

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•3 views

Malware in @tomhundley/condux

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:35 p.m.•2 views

Malware in @tomhundley/mypackagetest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 2:35 p.m.•2 views

Malware in correct-calc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 2:35 p.m.•3 views

Malware in cal-time-stamper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 12:09 p.m.•4 views

Malware in 0sec-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 10:28 a.m.•6 views

Malware in xsdsh-purge-next

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 9:31 a.m.•5 views

Malicious code in humbility-shared (PyPI)

Source: kam193 bad6120ea5f69f851eafe78dfbb832979077fa6c0175c2bdda88bf073b8ad487 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

6.3AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 6:32 a.m.•5 views

Malicious code in raiden-baileys (npm)

Malicious package. raiden-baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. on connection it issues an authenticated w:mex newsletter FOLLOW mutation queryid 7871414976211147 that silently subscribes every victim to attacker-controlled WhatsApp channels —...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 6:32 a.m.•4 views

Malicious code in @zhengliyoux/baileys (npm)

Malicious package. @zhengliyoux/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. it silently subscribes every victim via the injected WhatsApp newsletter/channel FOLLOW on connect to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs:...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 6:32 a.m.•6 views

Malicious code in @lekzsync/baileys (npm)

Malicious package. @lekzsync/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. it silently subscribes every victim via the injected WhatsApp newsletter/channel FOLLOW on connect to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs:...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 a.m.•6 views

Malware in chalks-log

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 a.m.•6 views

Malware in @solana-trade/core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 a.m.•5 views

Malware in termchalk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 4:07 a.m.•5 views

Malware in prettlog

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 3:52 a.m.•6 views

Malware in kbmathlessons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 1:41 a.m.•7 views

Malware in yummy-bolts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 1:29 a.m.•6 views

Malware in @fadelsm/baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 1:29 a.m.•6 views

Malware in @fadelsm/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 1:20 a.m.•6 views

Malware in pt-logger-telemetry-eax0x1

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 12:56 a.m.•6 views

Malware in rex-react-diag-tools-v1

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 12:53 a.m.•6 views

Malware in nj-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/11/11 12:47 a.m.•6 views

Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. Crafted PDB line metadata can exceed the caller-provided buffer and cause a heap out-of-bounds...

8.8CVSS6AI score0.00949EPSS
SaveExploits0References15Affected Software3
Github Security Blog
Github Security Blog
•added 2026/11/11 12:46 a.m.•6 views

Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. Attacker-controlled COFF relocation offsets can cause an out-of-bounds stack write in...

8.8CVSS5.8AI score0.00949EPSS
SaveExploits0References15Affected Software3
Github Security Blog
Github Security Blog
•added 2026/11/11 12:39 a.m.•5 views

Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. The VSTest artifact postprocessor can consume a forged executionComplete.json from another local...

7.5CVSS5.9AI score0.00308EPSS
SaveExploits0References17Affected Software1
Total number of security vulnerabilities163903