pkg-runtime

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 28, 2026
Last mentioned2d ago

Timeline

1 articles · newest first

Malware planted in 42 GitHub repos targets Claude, Gemini and Cursor

Hooks in .github/init.js run at session start; JFrog links the traps to the testmetest npm campaign.

Cyber Security Newsupdated 15:15 UTC · 8h agofirst Oct 28, 05:58 UTC · 2d agoMalware 5 sourcesCVE-2026-419405 · 1 read

Related CVEs

by mentions

CVE-2026-4194099%9.3
Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
published Apr 29, 2026WebPros cPanelKEVRansomwarePoC ×9

Appears with

CementBeetleSteeplethreat actor · 1
Crayon-Biz-LLPvictim · 1
VS Codeproduct · 1
Claudeai model · 1
cPanel and WHMproduct · 1
net-health-checkermalware · 1
GitHubproduct · 1
JFrogorganization · 1
Geminiai model · 1
testmetestmalware · 1
Cursorproduct · 1
SafeDeporganization · 1
ci.jsmalware · 1
npmproduct · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.