An Attacker Left Their PaperCut Toolkit on the Open Internet
Written by detections.ai · Organizer
Someone left PaperCut, an attacker toolkit on the open internet with the exploit code included.
Three of the four reports this week sit in the toolchain you build from: Node.js, npm, GitLab CI/CD. Each one arrives in a different house style, and at the end of all of them you're still writing the rule yourself.
Currently live this week on detections.ai:
➡️ Node2Shell (CVE-2026-111497), documented by Aikido, is a remote code execution flaw in Node.js reached through Brotli decompression, so the input that triggers it arrives compressed and looks like nothing much until the server unpacks it.
Detections can be found here.
➡️ StepSecurity traced the compromised tensorlake npm package to a worm that steals developer tokens and uses them to republish itself into the next package, so one leaked credential is enough to keep the chain moving on its own.
Ready to use detections found here.
➡️ Hunt.io pulled an attacker's AI-assisted toolkit off that same exposed host, with exploit code for a second PaperCut RCE sitting beside it. The operator's own tooling, left where anyone who found the box could read it.
Detections found here.
➡️ GitLab's CVE-2026-97229 sits in the regular expression compiler that CI/CD jobs run through, so whatever your pipeline config and job definitions feed it reaches the flaw directly. Help Net Security has the affected versions and the upgrade path, and this one is a patch job before it's a detection job.
Find detections here.
Detection coverage for all four is live on the detections.ai intel exchange, among many others.
