CVE-2025-58671

creationtimestamp| type| source ---|---|--- 2025-09-23 16:49:58+00:00| seen| Telegram/mb8gLQD4SrM6OLS3941ymRznRACt1s60azHSR2ntMj3ucU...

CVE-2025-56394

creationtimestamp| type| source ---|---|--- 2025-09-23 04:07:00+00:00| seen| https://gist.github.com/DDGod2025/532691e3e2db9b47c67c3d153c026e62...

MAL-2025-48891 Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

SingleStore: Privilege Escalation – Access to the Alert Subscribers page for users with low privileges

A privilege escalation vulnerability was discovered in the SingleStore Helios alert management system. The vulnerability allowed users with low privileges to access the Alert Subscribers API endpoint and retrieve email addresses and alert severity level preferences of notification subscribers,...

CVE-2025-6544

creationtimestamp| type| source ---|---|--- 2025-09-21 13:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzdyqsetzd2c 2025-09-22 01:32:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzfb75ldxl2w 2026-05-22 14:09:29+00:00| seen|...

Malicious Package

Overview internallibv915 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. The workflow we are highlighting...

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. The workflow we are highlighting...

CVE-2025-6198

creationtimestamp| type| source ---|---|--- 2025-09-19 05:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz657cfcn62c 2025-09-23 18:51:24+00:00| seen| https://infosec.exchange/users/edwardk/statuses/115255114722172590 2025-09-24 04:06:07+00:00| seen|...

CVE-2023-53431

creationtimestamp| type| source ---|---|--- 2025-09-18 16:45:34+00:00| seen| Telegram/ZPOxjpjyAbwLHS3qvLJrJBx-kTECRwAUouCcFYLDi76CWs...

CVE-2025-9972

creationtimestamp| type| source ---|---|--- 2025-09-17 07:40:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzdgsyn7v2a...

CVE-2025-43287

creationtimestamp| type| source ---|---|--- 2025-09-17 04:45:56+00:00| seen| Telegram/fDMyMJAv0zZ05H1qj7ApP09ICrzj5rbfQUvBqa5TLqCkSsA...

MAL-2025-47402 Malicious code in kecks (npm)

The package kecks was found to contain malicious code...

CVE-2025-37130

creationtimestamp| type| source ---|---|--- 2025-09-16 22:43:44+00:00| seen| Telegram/kguWd5Aun6eq72JVBm7iqZdRZAVyYP4th-x2becp-RgRVo...

CVE-2025-10533

creationtimestamp| type| source ---|---|--- 2025-09-16 13:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxg73ijtm2c 2025-09-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsj7rh2d 2026-04-13 17:58:03+00:00| seen|...

Malicious Package

Overview aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview openzeppelin-compact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in alert-codestreamer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in alert-codestreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview alert-codestreamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...