Threat database

The PyPI package 'slatejob' version 0.1.0 is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. Although the package itself does not contain the payload, it acts as a delivery mechanism for potentially harmful code. This coordinated campaign aims to provide multiple deceptive methods to load malicious code remotely.

The jobwharf package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. These packages do not contain the payload themselves but facilitate downloading and running malicious scripts. The campaign is coordinated and intended to deceive users into executing harmful code.

The PyPI package 'sitecard' versions 0.1.0 through 0.1.14 contains malicious code that creates an SSH session exposed via tunnels. This session is accessible without any authentication by default and reports to a hardcoded location, effectively acting as a backdoor. This exposes users to unauthorized remote access by attackers.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to golang1.26 packages. The advisory addresses multiple CVEs (CVE-2026-94440, CVE-2026-97030, CVE-2026-111943) with a high severity rating. The update provides bug fixes and enhancements to the golang1.26 RPMs across multiple architectures. No explicit patch versions or affected versions are detailed in the advisory. The update is available via Red Hat's public repositories.

Red Hat has issued a security advisory for the grafana-pcp plugin used in Red Hat Enterprise Linux 8. This update addresses multiple vulnerabilities including denial of service issues in golang's crypto/tls and net/http packages, and a man-in-the-middle attack vector via untrusted intermediate certificates in crypto/x509. The vulnerabilities affect the handling of ECH outer extension references, excessive HTTP/2 SETTINGS frames, and certificate validation respectively. The update is rated as Important by Red Hat Product Security and is available for various Red Hat Enterprise Linux 8 architectures and extended life cycle versions.

Red Hat has released a critical security update for Red Hat OpenShift Developer Tools - Openshift Jenkins 4.13. The update addresses multiple vulnerabilities identified by CVE-2024-38827 and numerous other CVEs. Users of Openshift Jenkins 4.13 are recommended to upgrade to the latest version to mitigate these security issues.

A use-after-free vulnerability (CVE-2026-109619) exists in PHP's fatal error handling, where stale request state is retained. This flaw affects PHP as packaged in Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat has issued a security update to address this issue. The vulnerability is rated as having an important security impact by Red Hat Product Security.