CVE-2026-28407 — malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extra — CVE Database · The Intelligence Room