11132 matches found
Malicious code in codegrid-js (npm)
The package codegrid-js was found to contain malicious code...
MAL-2025-48476 Malicious code in @wen-community/wen-new-standard (npm)
The package @wen-community/wen-new-standard was found to contain malicious code...
MAL-2025-48467 Malicious code in @hotels-at-home/hah-fe-core (npm)
The package @hotels-at-home/hah-fe-core was found to contain malicious code...
EUVD-2025-34843
Malicious code in n8n-nodes-phoai-ultimate-tools npm...
CVE-2025-53474
creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/ 2026-02-06 17:10:05+00:00| seen|...
CVE-2025-59481
creationtimestamp| type| source ---|---|--- 2025-10-15 14:16:05+00:00| seen| Telegram/EoiprTyskng0KHCJL7AT9DJwBx-4M2ZHKuB4FYrrvAR6-Y 2026-02-04 19:28:38+00:00| seen| Telegram/00DHTaU6lTWShuv9TngbZkyCHrkrFZTa0zsIsXVjILusDA...
Malicious Package
Overview cryptocom-private-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview curve-ui-kit-security-notice is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2025-11623
creationtimestamp| type| source ---|---|--- 2025-10-15 01:58:41+00:00| seen| https://poliverso.org/objects/0477a01e-a74d375c-c413eae3a2f903b8...
CVE-2024-50571
creationtimestamp| type| source ---|---|--- 2025-10-14 18:17:41+00:00| seen| Telegram/HpzjxqiGLtm7b6F-ayme7ZHqHNvh0kEBjBtTOOaZs67yY...
CVE-2025-25253
creationtimestamp| type| source ---|---|--- 2025-10-14 18:17:31+00:00| seen| Telegram/7DSe42ElHDKq2nxsDFHcYpUxpCQjTYbZ6NZaT2s57pWzLE...
CVE-2025-59494
creationtimestamp| type| source ---|---|--- 2025-10-14 16:13:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0311 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:24:50+00:00| seen|...
CVE-2025-10557
creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:35+00:00| seen| Telegram/WM72dKC9JfGAo4CSStxbpLJ2VPHuwP9d0ucsocDyuRJiGyg...
Malicious Package
Overview internallibv14 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Exploit for Use After Free in Microsoft
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Dete...
CVE-2025-11518
creationtimestamp| type| source ---|---|--- 2025-10-11 09:17:11+00:00| seen| Telegram/Ql29tSAte7BFaSNSVPXra7LgWLH2fJoYi0dRwAjSjSvT7A...
CVE-2025-58287
creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:57+00:00| seen| Telegram/kmjuKfn41MRsce8zAIF3MLxJ0ho7Ipf0hb9FwZthKDgLD-c...
Malicious code in mcp-runcommand-server2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 36fb61d44529c380f204d5a210017989695ef39df6adfce7ccfb08e48a17b594 Package starts a reverse shell to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-191647 Malicious code in mcp-runcommand-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 17f8adb9e7e30e13f8656300881d4e04975f499c03c2f1dbea2e00fd86c357a5 Package starts a reverse shell to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...