The NLTK package's TreebankWordTokenizer.span_tokenize method contains a performance vulnerability due to an unguarded quadratic-time loop triggered by input with many consecutive double-quote characters. This causes CPU exhaustion by repeatedly calling list.pop(0) on a large list, resulting in denial of service or latency degradation. No authentication or special configuration is required, and the vulnerability affects versions from 3.2.5 up to but not including 3.10.4. A fix is available in version 3.10.4.
The npm package 'dowload_ebok_verstrengeld_by_vivian_gornick_bck96' contains malicious code that fully compromises any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate rotation of all secrets and keys from a different, uncompromised machine is recommended. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_una_ragione_per_uccidere_un_mistero_di_avery_blac_by_blake_pierce_30q0g' contains malicious code that fully compromises any computer on which it is installed or running. Removal of the package alone does not guarantee elimination of all malicious software introduced. Immediate rotation of all secrets and keys stored on the compromised machine is strongly advised.
The npm package 'dowload_ebok_the_empath_s_survival_guide_by_judith_orloff_0mqkt' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but due to the extent of control the malicious code may have gained, complete remediation cannot be guaranteed by removal alone.
The npm package 'dowload_ebok_rum_by_bernhard_schafer_nke9n' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_morella_espanol_by_edgar_allan_poe_s8o3s' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended; however, due to the potential for persistent malicious software, complete remediation may require additional measures such as rotating all secrets from a different, uncompromised system.
The npm package 'dowload_ebok_anabolikum_das_rote_buch_by_uwe_ramspeck_eokrj' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_the_second_economy_by_steve_grobman_allison_cerra_if3ob' contains malicious code that compromises any computer on which it is installed or running. Installation of this package may lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but complete remediation cannot be guaranteed due to potential persistent malicious software.
The npm package 'dowload_ebok_revista_espirita_1860_by_allan_kardec_eb32k' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of the malicious software, as full control may have been granted to an outside entity.
The npm package 'dowload_ebok_wer_beherrscht_die_welt_by_noam_chomsky_k76qg' contains malicious code that fully compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee eradication of all malicious software introduced by it.
The npm package 'dowload_ebok_this_was_a_man_the_clifton_chronicles_7_by_jeffrey_archer_mcnud' is identified as malicious software. Installing or running this package results in full compromise of the affected computer. It is strongly advised to remove the package and rotate all secrets and keys from a different, uncompromised machine. However, removal of the package alone may not eliminate all malicious components due to potential full system control by attackers.
The npm package 'dowload_ebok_star_wars_sombre_apprenti_by_christie_golden_te0qg' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
A malicious package identified as 'dowload_ebok_guia_hbr_mejora_tu_escritura_en_el_trabajo_by_bryan_a_garner_harvard_business_review_kt7uu' contains harmful code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, uncompromised machine. Removal of the package alone may not fully eliminate the malicious presence due to potential persistent control by an external entity.
The npm package 'dowload_ebok_equipos_ideales_by_patrick_lencioni_2g5u0' contains malicious code that compromises any computer on which it is installed or running. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but complete remediation may require rotating all secrets and keys from a separate, uncompromised system due to potential persistent malicious software.
The npm package 'dowload_ebok_christian_kern_by_robert_misik_u7b2u' contains malicious code that fully compromises any computer on which it is installed or executed. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removal of the package alone does not guarantee elimination of all malicious components, as the attacker may have established persistent control.
The npm package 'dowload_ebok_cheech_is_not_my_real_name_by_cheech_marin_9zl5e' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_stupro_a_pagamento_by_rachel_moran_uhr9t' contains malicious code that fully compromises any computer on which it is installed or run. Systems affected by this package should be considered completely compromised, and all stored secrets and keys must be rotated from a separate, secure machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
CVE-2026-128987 is a vulnerability in the dbus component of Red Hat Enterprise Linux 10 where a local attacker can cause a denial of service by triggering a continuous retry loop that leads to excessive CPU consumption. The flaw arises when socket writes encounter broken pipe errors treated as retryable, causing the application to spin indefinitely. This impacts process availability but does not allow privilege escalation or data compromise. No effective mitigation or patch is currently available from Red Hat.
A flaw was found in D-Bus. In configurations where the daemon falls back to using the Unix select() mechanism for event monitoring, it does not verify whether file descriptor numbers exceed allocated limits. A local attacker can exploit this flaw by opening a large number of concurrent connections to trigger an out-of-bounds write on the stack. This can cause the daemon to crash, resulting in a Denial of Service (DoS).
The npm package 'dowload_ebok_the_complete_rigger_s_apprentice_tools_and_techni_by_brion_toss_1icy5' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not eliminate all malicious software introduced by it, as the attacker may have gained full control of the system.