Malicious code in @gaxtamvan/baileys (npm)

@gaxtamvan/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...

Malicious code in @fanzxnothuman/baileys (npm)

@fanzxnothuman/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @epinkenedy/siiu (npm)

@epinkenedy/siiu is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @hanzzy/baileys (npm)

@hanzzy/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @fadeldev/baileys (npm)

@fadeldev/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @farisme/baileys (npm)

@farisme/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...

Malicious code in @fyxzbail/baileys (npm)

@fyxzbail/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at runtime...

Malicious code in @fadelsm/baileys (npm)

@fadelsm/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @fadzzzslebew/baileys (npm)

@fadzzzslebew/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @devil-fight/baileys (npm)

@devil-fight/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @fadeldev/baileys-mod (npm)

@fadeldev/baileys-mod is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @hanzzyy/baileys (npm)

@hanzzyy/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...

Malicious code in @fadeldev/baileys-mods (npm)

@fadeldev/baileys-mods is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in shanks (PyPI)

The module shanks/shanks.py, when imported, looks up the machine's public IP address and location from a geolocation service and posts the IP address, city, state, postal code, latitude and longitude, with an @everyone mention, to a hard-coded Discord webhook. The package describes itself only as...

Malicious code in @alzx7z/baileys (npm)

@alzx7z/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @barz-dev/baileys (npm)

@barz-dev/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @billabilloyy/baileys (npm)

@billabilloyy/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in src/Socket/newsletter.js, src/WAUSync/Protocols/USyncNewsletterProtocol.js sends the...

Malicious code in @daffaadev/baileys (npm)

@daffaadev/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @aboutdisz/baileys (npm)

@aboutdisz/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @bellachu/bails (npm)

@bellachu/bails is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @animebails/baileys (npm)

@animebails/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @daffadevv/baileys (npm)

@daffadevv/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @arkanhahaha/baileys (npm)

@arkanhahaha/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @baileys-md/baileys (npm)

@baileys-md/baileys is a fork of the Baileys WhatsApp Web library. In version 12.2.0, makeNewsletterSocket in lib/Socket/newsletter.js starts a timer that, 80 seconds after the socket is created, sends the WhatsApp w:mex FOLLOW query for the channels 120363419781122699@newsletter and...

Malicious code in strutil-core (RubyGems)

strutil-core 1.0.1, presented as "Core string utilities for Ruby", runs its payload at install time from its native-extension step. The step downloads the Bun JavaScript runtime from Bun's GitHub releases into a hidden temporary directory /tmp/.b/ and runs ext/strutil-core/index.js from the...

Malicious code in @vanzky/baileys (npm)

Malicious package. @vanzky/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. it silently subscribes every victim via the injected WhatsApp newsletter/channel FOLLOW on connect to attacker-controlled WhatsApp channels — hardcoded newsletter JIDs:...

Malicious code in @bmbxmd/baileys (npm)

@bmbxmd/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at runti...

Malicious code in @devpeacemaker/baileys (npm)

@devpeacemaker/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @denzy-official/baileys (npm)

@denzy-official/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @danzxcode/danzx-bail (npm)

@danzxcode/danzx-bail is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...

Malicious code in @daffaadev/baileyss (npm)

@daffaadev/baileyss is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @bufferstudio/baileys-natsu (npm)

@bufferstudio/baileys-natsu is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/index.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @darling-2002/baileys (npm)

@darling-2002/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...

Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses

Summary The Kubeflow Pipelines frontend reflected untrusted pod names and namespaces into HTML error responses from the pod-information and pod-events routes. An attacker could craft a link that causes JavaScript to execute in the frontend's origin when a user follows it and reaches an affected...

Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

Summary Kubeflow Pipelines API server does not sufficiently validate SQL identifier fields decoded from the pagetoken pagination parameter. Client-controlled fields can reach SQL query construction, allowing SQL injection through list APIs. This advisory consolidates the original pipeline-listing...

Kiwi TCMS account confirmation open redirect through protocol-relative URLs

Summary In Kiwi TCMS version 16.1, the fix for CVE-2026-54724 open redirect via unvalidated next parameter in the account confirmation endpoint is incomplete. The validation uses startswith"/" to check if the redirect URL is local, but this is bypassed by protocol-relative URLs like //evil.com...

Malware in price-scripping-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in js-price-client-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in polymarket-stake-mathss

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines

Summary In multi-user mode, the Kubeflow Pipelines API server skipped authorization checks for shared/global pipelines with an empty namespace. This exception applied to write and delete operations as well as reads, allowing an authenticated user to modify or delete shared pipelines without the...

Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

Summary The Kubeflow Pipelines API server fetched caller-supplied pipeline package URLs without restricting the destination. A caller authorized to create a pipeline or pipeline version could cause requests to originate from the API server's network position, including to internal services that t...

Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)

Summary The legacy Kubeflow Pipelines V1/raw-Argo execution cache does not separate cached results by Kubernetes namespace. In multi-user deployments where tenants share the cache service, a tenant can receive another tenant's cached outputs or seed outputs that are subsequently substituted into...

Malware in @bestcoolman/dev-mcp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

Claude Code validated Edit tool targets using point-in-time pathname and symlink resolution that was not bound to the underlying directory inodes or file descriptors. On macOS, a process running inside Claude Code's Bash sandbox could exploit the resulting time-of-check to time-of-use window by...

croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive

Summary croc is an end-to-end encrypted peer-to-peer file transfer tool. On the receiving side, the confirmation that normally protects an existing file from being overwritten or resumed is skipped whenever the received file's name starts with croc-stdin-, regardless of whether the incoming...

DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885

Summary The CVE-2026-32885 ZipSlip fix added a symlink-target escape check to Untar, but the check rebases an ABSOLUTE symlink target into dest before validating filepath.Joindest, "/etc" stays lexically inside dest and passes, while the symlink is then created with the RAW absolute target via...

Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser

Summary The TCP transporter's packet parser src/transporters/tcp/parser.js reads the packet length field with Buffer.prototype.readInt32BE, a signed read. A crafted packet whose length field has the sign bit set yields a negative length. The parser then advances past the parsed message with packe...

Malware in charape

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin

Summary The sql VQL plugin runs a caller-supplied database driver and connection string with no permission check vql/parsers/sql/sql.go:93, SQLPlugin.Call. For driver='mysql' or driver='postgres' the handle comes from GetHandleOther sql.go:39, which passes the connection string straight to Go...

Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

Summary In multi-user mode, the Kubeflow Pipelines API server's HTTP multipart upload endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/uploadversion perform no authorization when the target namespace is empty. The authorization helper canUploadVersionedPipeline retur...