The PyPI package 'ln9qw38745g' versions 0.1.0 and 0.1.1 contain embedded malicious code. This package overrides the installation process to execute malware, specifically a remote access trojan (RAT), during setup. It is linked to a prior package that switched from benign to malicious executables after a few releases.
The PyPI package 'protecteda' version 0.1.0 contains embedded malicious code that acts as an infostealer when executed as a module. This malware is part of a campaign identified as 2026-11-protecteda with clear malicious intent to steal information.
The npm package 'txnforge' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee full remediation, as the attacker may have established persistent control over the system.
The npm package 'print-hello-world-test-temp' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a separate, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
A NULL pointer dereference vulnerability exists in the Qt Core module during QCborValue to JSON conversion. An attacker can supply specially crafted Concise Binary Object Representation (CBOR) data to trigger a denial of service by causing an application crash. This issue affects Red Hat Hardened Images RPMs containing qt6-qtbase packages. The vulnerability is identified as CVE-2026-105924 and is rated medium severity by Red Hat.
A vulnerability in the qs package used in Red Hat Hardened Images RPMs allows improper encoding of object keys containing empty array values when configured with allowEmptyArrays: true. This flaw can be exploited by a remote attacker supplying crafted input with query delimiter characters to inject arbitrary query parameters or truncate query strings forwarded to downstream services. Red Hat has released updated RPMs including grafana13.2-13.2.4-0.6.hum1 to address this issue.
A vulnerability in rust-rpm-sequoia allows an attacker to cause an application-level denial of service by providing a specially crafted RPM file. The flaw triggers a Rust panic during OpenPGP signature verification, causing the rpm process to abort unconditionally. This issue can be exploited without privileges or user interaction by processing a malicious RPM file, for example using rpm -Kv or rpm --checksig. The vulnerability affects Red Hat Hardened Images RPMs and has been addressed in updated packages.
The zyto package on PyPI versions 0.2.0 through 0.2.3 contains malicious code that executes during installation by overriding the install command in setup.py. This behavior is intended to prepare for embedding a Remote Access Trojan (RAT), indicating clear malicious intent. The package has been flagged by some antivirus vendors as malicious and is part of a broader campaign identified as 2026-11-filipt.
The hijuko-pilara package on PyPI is identified as malicious software that uses fake HTTP-downloaded dependencies to track downloads. It serves no legitimate purpose beyond this tracking activity and is associated with dependency confusion tactics. The package is considered low-harm and likely related to pentesting or research activities.
A critical vulnerability exists in Red Hat AI Inference 3.5.3 (CUDA) related to the vLLM component. The system downloads and decodes remote or embedded media files before enforcing size and quantity limits, allowing a remote attacker to submit excessively large or numerous media payloads. This leads to resource exhaustion, causing denial of service by making the service unresponsive or crashing it. The flaw does not allow code execution or data exposure. Mitigations include restricting network access, blocking outbound connections to prevent fetching untrusted media, and enforcing request size limits at proxies.
Red Hat AI Inference Model Optimization Tools 3.5.3 (CUDA) is referenced in a critical security advisory by Red Hat. The advisory lists numerous CVEs associated with the product but does not provide specific details or fixes for CVE-2026-96636 or related vulnerabilities. One related CVE (CVE-2026-111063) involves a low-severity flaw in aiohttp where the Secure attribute on shared cookies is not properly enforced, potentially exposing sensitive information over unencrypted connections. No fixes are currently available for the listed vulnerabilities in the AI Inference Model Optimization Tools. The advisory does not specify affected versions or mitigation steps beyond general awareness.
Multiple critical authentication bypass vulnerabilities have been identified in the pyjwt library used by the fence-agents packages in Red Hat Enterprise Linux 9.2. These vulnerabilities include acceptance of empty HMAC keys, improper public key validation, acceptance of DER public keys as HMAC secrets, unvalidated JWKS redirects, and token forgery via improper Unicode byte-order mark handling. The fence-agents packages manage remote power control for cluster devices, making these vulnerabilities significant for cluster security. Red Hat has released security updates addressing these issues.
Gorbag is a Russia-aligned cyberespionage threat actor active since February 2025, targeting Ukrainian law enforcement, justice entities, local administrations near the front line, and defense sectors. The group uses spearphishing emails with malicious attachments to gain initial access and employs simple infostealers for rapid data collection, including browser credentials, VPN configurations, and selected documents. Their toolset includes Prime ReverseShell and BeautyStealer. In early 2026, Gorbag incorporated exploitation of CVE-2025-8088, a WinRAR path traversal vulnerability, into their attack chain. The group appears to focus on quick intelligence harvesting rather than long-term persistence, possibly acting as an initial access broker sharing credentials with other Russia-aligned actors.
Microsoft Threat Intelligence has identified a malware campaign that targets users seeking cracked software, free games, activators, and unofficial utilities. The campaign uses trojanized Inno Setup-style installers to deliver monetized software payloads via a multi-stage attack chain. These payloads include routing third-party internet traffic through infected devices, enrolling devices in distributed computing platforms, and installing utility software without user consent. The malware achieves persistence through scheduled tasks and operates silently, posing security and privacy risks to affected users.
The Haiou jailbreak bundle is a prompt package targeting OpenAI Codex that weakens model guardrails for security-related tasks such as hacking and software cracking. It functions as prompt adware by modifying Codex configuration files to inject advertisements for the author's LLM gateway service into agent responses. The bundle uses techniques like role-playing, context-reframing into CTF scenarios, and refusal suppression. It was found on a misconfigured webserver alongside tools like Cobalt Strike, VulnClaw agent, and Ladon framework, indicating active use by cybercrime actors. The freely distributed jailbreak serves as a channel to promote a paid gateway service, persistently injecting promotional content through encrypted payload files distributed via GitHub and Chinese platforms.
