The npm package '@redman89405/my-module' contains malicious code that compromises any computer on which it is installed or running. This compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removing the package alone may not eliminate all malicious software introduced by the package, as full control of the system may have been granted to an attacker.
The npm package 'runhelper' version 1.0.0 contains malicious code that, upon being required, loads and executes a native payload disguised as a .jpg file. This payload is staged by its dependency 'imgbundle' and executed in-memory on Windows systems using kernel32 API calls via the 'koffi' FFI. The payload file is deleted after execution, and the module suppresses all errors, hiding its true behavior. The advertised functionality is a cover story; the actual behavior is the execution of attacker-supplied native code in-process.
The npm package 'iban-validator-js' contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, and all secrets and keys stored on the affected machine should be rotated immediately from a separate, secure device. Removing the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'focaleys' version 1.1.0 declares a dependency on 'libsignal' via a GitHub repository reference without specifying a fixed tag, version, or commit SHA. This means that on installation, the dependency resolves to the current default branch HEAD of the repository, executing any lifecycle scripts present there on the installer's machine. Control of the GitHub account 'rexxzyid' thus allows an attacker to run arbitrary code during installation of 'focaleys', potentially changing silently between installs without modifying the 'focaleys' package itself.
The npm package 'fca-raihan' versions 37.2.5 and 37.2.6 declare a dependency on themselves via an off-registry GitHub source without a pinned reference or integrity check. This allows the repository owner to change the installed code at any time, potentially introducing malicious code during installation. The package includes base64 decoding and references consistent with its advertised messaging and end-to-end encryption functionality, but these are not independently verifiable without examining the mutable GitHub source at install time.
The npm package exiouss version 5.0.1 contains malicious code that imports the child_process module and sends POST requests to hardcoded endpoints, including a public Google domain and a non-resolvable internal domain likely used for attacker command and control. The code also repeatedly invokes ping commands, indicating potential active data exfiltration or reconnaissance behavior. This activity is inconsistent with normal HTTP client operations and suggests the package has been compromised to perform unauthorized network communication.
The npm package 'imgbundle' versions 1.0.0 and 1.0.1 contains malicious code that does not perform its advertised image bundling function. Instead, it decrypts an AES-256-CBC encrypted file from a sibling dependency 'cdn-img-fetch' using a hardcoded key, writes the decrypted content to disk, deletes the original encrypted file, and sets up a file watcher to repeat this process if the encrypted file reappears. This behavior effectively makes 'imgbundle' a staged dropper that materializes attacker-controlled content on the filesystem at import time, contrary to its stated purpose.
The contoso-login-sim-loader npm package contains a malicious payload concealed as an RC4-encrypted base64 blob that decrypts and executes in the browser at runtime. It employs anti-analysis techniques such as detecting developer tools and disabling console logging to evade detection. The package lacks source code, dependencies, or documentation, and its deceptive naming and description suggest it may serve as a fake login or credential-harvesting overlay when included in websites. This behavior poses a risk of embedding attacker-controlled JavaScript into affected sites, potentially compromising end users.
The npm package cdn-img-fetch versions 1.0.0 and 1.0.1 unconditionally downloads a file from a mutable third-party GitHub repository at module load time and writes it to a hidden temporary file on the installer's system. This behavior occurs automatically upon import without user interaction and does not verify the source content's integrity. The package's advertised functionality does not justify this import-time network fetch and hidden file write, indicating malicious intent as a first-stage dropper mechanism.
The PyPI package 'cleanup-string' version 1.0.0 includes a suspicious Windows-only native extension protected by VMProtect, a tool used to obfuscate and virtualize code to prevent analysis. Although the package claims to be a pure-Python string helper, it loads a large opaque binary module with no clear legitimate purpose. This module executes with the privileges of the importing process in any Windows Python 3.13 environment, potentially enabling malicious activity.
The cortana-md-engine npm package contains hardcoded MongoDB credentials that allow the package author to access WhatsApp session data from installed bots. This access enables potential hijacking of linked WhatsApp accounts. Additionally, the package includes offensive tools for abuse against third-party WhatsApp users, such as proxy pools and commands for flooding and banning. The malicious functionality is not disclosed in the README, misleading users about the package's true behavior.
CVE-2026-102913 is a SQL injection vulnerability in SourceCodester Car Driving School Management System version 1.0. The flaw exists in an unspecified function within the file /classes/Master.php, specifically the save_enrollment function. This vulnerability allows remote attackers to manipulate SQL queries, potentially compromising the database. The exploit code has been publicly released, increasing the risk of exploitation. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity level.
CVE-2026-103111 is a high-severity vulnerability in PCRE2 versions before 10.49. It involves an out-of-bounds write triggered by attacker-controlled regular expressions combined with specific JIT API usage. This flaw can lead to arbitrary data being written out-of-bounds, affecting integrity and potentially availability.
The npm package chaienv version 1.0.2 contains a large obfuscated JavaScript payload disguised as a small Chai environment helper. The package loads a 4.4MB single-line obfuscated module that does not match the advertised functionality and includes decoy files mimicking a legitimate project to evade casual inspection. Any user importing this package executes the opaque code, which poses a risk of malicious behavior.
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date_start/date_end leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 0.11.8 is able to address this issue. This patch is called 360867034e79175b45c8e04a98e4ca712bbaca35. Upgrading the affected component is advised.
A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child_process.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information.
A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component Execute Endpoint. The manipulation of the argument command/shell leads to os command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.