Threats Tagged 'mal-2026-5991'
View all threats tagged with 'mal-2026-5991'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-5991'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in req-parmas-valid (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (063b7e2667c434784d0b5d2ce333ea700fbc17571da3f5f4fc7d0f03ac406bd0) Package name `req-parmas-valid` impersonates the well-known `request` HTTP client (description copied verbatim as 'Simplified HTTP request client.', `bugs.url` points at `github.com/request/request/issues`, README and most source copied from upstream). Bolted onto the copied source is a malicious `middleware` export (also exposed as `reqValidator` and the package's default export) which spawns a detached `node lib/callers.js` child process. `lib/callers.js` performs an HTTPS GET to `https://www.jsonkeeper.com/b/DDC6J` (an anonymous, mutable paste host), reads the `Cookie` field of the JSON response, and evaluates it via `new Function.constructor("require", s)(require)` — handing the fetched bytes full Node `require` capability with no integrity check, no pinning, and a payload host completely alien to the package's advertised purpose. Any consumer that imports and uses the middleware (the obvious Express-style API shape) executes arbitrary remote code controlled by whoever currently owns the paste. Join the discussion | GCVE Database | 06/17/2026, 04:20:22 UTC Added: 09/01/2026, 15:45:27 UTC |
Showing 1 to 1 of 1 result