Threats Tagged 'mal-2026-14297'
View all threats tagged with 'mal-2026-14297'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14297'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in homekit-mcp (npm) 0 The npm package 'homekit-mcp' version 1.0.0 is a malicious package masquerading under a HomeKit/MCP-related name but contains no legitimate functionality. It collects user identity information such as email, username, and hostname by querying git and npm configurations and environment variables. Upon user consent obtained via an interactive prompt during installation, it sends this data to a hardcoded external Zapier webhook. The package self-describes as a 'harmless security research payload' by 'Capsule Security', but its behavior involves unauthorized data collection and transmission. Join the discussion | GCVE Database | 08/19/2026, 08:53:41 UTC Added: 08/19/2026, 13:50:43 UTC |
Showing 1 to 1 of 1 result