MAL-2026-10892 Malicious code in claude-code-timer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...

MAL-2026-10873 Malicious code in @dxcl/customer-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10914 Malicious code in my_shoaib_gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...

MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...

CERTFR-2026-ACT-031

creationtimestamp| type| source ---|---|--- 2026-07-20 08:34:42+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mr2v5ko7qq2g 2026-07-20 08:51:10+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mr2w2zlyeq2b 2026-07-20 08:51:16+00:00| seen|...

CVE-2026-63833

creationtimestamp| type| source ---|---|--- 2026-07-19 16:20:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz6p2prrg2b 2026-07-20 18:42:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3x55gnxp2l 2026-07-20 18:42:57+00:00| seen|...

CVE-2026-16214 geex-arts django-jet Dashboard views.py authorization

A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such manipulation leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and...

CVE-2024-58366

creationtimestamp| type| source ---|---|--- 2026-07-18 14:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwicf6c5p2a...

CVE-2026-9323

creationtimestamp| type| source ---|---|--- 2026-07-18 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwicdxykb2z 2026-07-18 15:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjrntoau2w 2026-07-18 16:39:55+00:00| seen|...

CVE-2026-16081

creationtimestamp| type| source ---|---|--- 2026-07-18 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16081 2026-07-18 12:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwaxbosi42q...

CVE-2024-23575

creationtimestamp| type| source ---|---|--- 2026-07-17 17:51:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucusonlo2e...

CVE-2026-10525

creationtimestamp| type| source ---|---|--- 2026-07-17 08:07:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcaltln22e...

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

CVE-2026-47084

creationtimestamp| type| source ---|---|--- 2026-07-16 20:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqs2foa2fl2m...

CVE-2022-25476

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:04+00:00| seen| Telegram/lkTqxrRLFzmZiKWrqHB7ywSYEM6i5xRhttz45dAnhSWBug 2026-07-16 19:00:04+00:00| seen| Telegram/5kmF1XOjEGp2eusQzn0DreB4leSvC4mbJ6rdQEpWsm7WOU 2026-07-17 00:00:26+00:00| published-proof-of-concept|...

CVE-2026-30618

creationtimestamp| type| source ---|---|--- 2026-07-16 14:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrhlnjf2q2a...

WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin WooCommerce Product Stock Alert versions = 3.0.6...