CVE-2025-9972

creationtimestamp| type| source ---|---|--- 2025-09-17 07:40:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzdgsyn7v2a...

CVE-2025-43287

creationtimestamp| type| source ---|---|--- 2025-09-17 04:45:56+00:00| seen| Telegram/fDMyMJAv0zZ05H1qj7ApP09ICrzj5rbfQUvBqa5TLqCkSsA...

MAL-2025-47402 Malicious code in kecks (npm)

The package kecks was found to contain malicious code...

CVE-2025-37130

creationtimestamp| type| source ---|---|--- 2025-09-16 22:43:44+00:00| seen| Telegram/kguWd5Aun6eq72JVBm7iqZdRZAVyYP4th-x2becp-RgRVo...

CVE-2025-10533

creationtimestamp| type| source ---|---|--- 2025-09-16 13:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxg73ijtm2c 2025-09-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsj7rh2d 2026-04-13 17:58:03+00:00| seen|...

Malicious Package

Overview aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview openzeppelin-compact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alert-codestreamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-43295

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:30+00:00| seen| Telegram/dCqEynpwtr-y3I3ArdM10a2EZwz9RT5XZs7AQ3thZ3o9VYg...

Malicious code in consolergbcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04beefffad3b4018eda21173a10a1dbebd8127bd9870d86e31894c6be592e107 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

CVE-2025-59328

creationtimestamp| type| source ---|---|--- 2025-09-15 12:21:27+00:00| seen| https://seclists.org/oss-sec/2025/q3/167 2025-09-15 14:32:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyuzjwdl7c2o 2025-09-15 17:16:56+00:00| seen|...

Malicious Package

Overview dev.voltstro.nativearrayspanextensions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview basic-validator-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mcp-chat-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-40687

creationtimestamp| type| source ---|---|--- 2025-09-11 12:36:18+00:00| seen| https://gist.github.com/Darkcrai86/b3420dd55f54cfd5f86a60bf88777fd9 2025-09-12 09:01:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lymvnh4wot2w...

CVE-2025-48040

creationtimestamp| type| source ---|---|--- 2025-09-11 11:17:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykmrkwzlv2c...

Malicious Package

Overview @self-sell/self-sell-amplitude-events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview @js-to-lua/handler-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-59044

creationtimestamp| type| source ---|---|--- 2025-09-10 02:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh5wurhik2h...

PT-2025-37083

Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack affected versions not specified Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low. Recommendations: At the moment, the...