Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · há 1d high

Prompt injection in AWS AgentCore Harness default config lets the root shell tool steal plaintext AgentCore Identity credentials

Unit 42 researchers found that in default AWS AgentCore Harness deployments, prompt injection can steer the agent's built-in shell tool to exfiltrate plaintext credentials resolved from AgentCore Identity. The shell tool is enabled by default and runs as root, in the same UID as the harness runtime (PID 1, python3.10 -m loopy.server). Tha…

safedep.io · há 1d critical

npm worm poisons 2,234 versions across 444 packages, including keyv and cacheable, stealing cloud and CI credentials

On 4 August 2026, an npm worm published 2,234 poisoned versions across 444 package names, using credentials from twelve organisations. Affected scopes include @ornikar, @deliveroo, @onereach, @or-sdk, @servicetitan, @qlik, @picsart, and the keyv and cacheable families. The keyv, flat-cache, file-entry-cache and cacheable-request packages …

technology software_development