A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to stay hidden from GitHub and automated scanners, according to JFrog researchers.Threat hunters at SafeDep, an open source supply... Weiterlesen: Worm armed 42 GitHub repos by hiding a payload too big to fail
Intelligence View
⚡ tsecurity.de Intelligence
Worm armed 42 GitHub repos by hiding a payload too big to fail
A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
55 źródeł
Apple’s new touchscreen MacBook Pros may be late, but they have one big advantage
54 kolejnych źródeł
ZZDNETvor 43 Min.Apple’s new touchscreen MacBook Pros may be late, but they have one big advantage TTechRepublicvor 25 Min.Apple Unveils Touchscreen OLED MacBook Pro Starting at $2,899 ZZDNETvor 43 Min.Apple’s new touchscreen MacBook Pros may be late, but they have one big advantage DDER SPIEGELvor 45 Min.MacBook: Apple bringt seinen ersten Laptop mit Touchscreen heraus TThe Mac Observervor 2 Std.Touchscreen MacBook Pro is official: PROLED OLED model starts at $2,899, ships November 6 TThe Mac Observervor 2 Std.How the touchscreen MacBook Pro works: gestures, apps and touch in macOS 27
+48
13 źródeł
CVE-2026-29136 | SEPPmail Secure Email Gateway up to 15.0.2 Notification cross site scripting
12 kolejnych źródeł
VVulDB Updatesvor 3 Std.CVE-2026-29131 | SEPPmail Secure Email Gateway up to 15.0.2 ldap injection VVulDB Updatesvor 3 Std.CVE-2026-29135 | SEPPmail Secure Email Gateway up to 15.0.2 password-tag input validation VVulDB Updatesvor 3 Std.CVE-2026-29133 | SEPPmail Secure Email Gateway up to 15.0.2 PGP Key input validation VVulDB Updatesvor 3 Std.CVE-2026-29134 | SEPPmail Secure Email Gateway up to 15.0.2 GINA Webdomain Metadata reliance on untrusted inputs in a security decision VVulDB Updatesvor 3 Std.CVE-2026-29132 | SEPPmail Secure Email Gateway up to 15.0.2 missing authentication VVulDB Updatesvor 2 Std.CVE-2026-29140 | SEPPmail Secure Email Gateway up to 15.0.2 Certificate certificate validation
+6
11 źródeł
ZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
10 kolejnych źródeł
ZZDI: Published Advisoriesvor 14 Std.ZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 14 Std.ZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 14 Std.ZDI-26-827: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 14 Std.ZDI-26-826: (0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability ZZDI: Published Advisoriesvor 14 Std.ZDI-26-825: (0Day) (Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability ZZDI: Published Advisoriesvor 14 Std.ZDI-26-823: (0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4299784/wiadomoci-it/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/