11085 matches found
CVE-2024-2374
creationtimestamp| type| source ---|---|--- 2026-04-16 10:08:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjm644xfd72t...
MAL-2026-2771 Malicious code in icims-express-dot-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc7ed2f685a8199818c3090faeaf9536fa49cced26ffde16ff9061c729e3143 The package icims-express-dot-engine was found to contain malicious code...
MAL-2026-2743 Malicious code in chai-use-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69d3debb629659a8d363e7f538314293640ed2e1625ef9ff51f9e9999ad2593 The package chai-use-chain was found to contain malicious code. Source: ghsa-malware 47423a7175b64aa5c431093d8c904461cce80e3c62c6d1895f3d96a2a43974db...
MAL-2026-2741 Malicious code in chai-chain-coremesh (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0998d78c57b51efc4ff5789a97e24374a9f1a3ea3d50422802d4f0b189473877 The package chai-chain-coremesh was found to contain malicious code...
MAL-2026-2713 Malicious code in @fuego-tools/analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b13e975286ea5f50f12e176e5b9399e209b890fc03e8d5f890f02d83a52489 The package @fuego-tools/analytics was found to contain malicious code...
Malicious code in @appleseed-apple/ac-sass-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c442c9bf5d1d38099a4ea05b85daf5b071a2d9e6e87dc72d030ecd4ca5404 The package @appleseed-apple/ac-sass-kit was found to contain malicious code...
Malicious code in @3stripes/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3a9f22040b78bb5d4973940dff6f5acad0f3a338e26c8f025ca96245acacc9 The package @3stripes/core was found to contain malicious code...
CVE-2026-25219
creationtimestamp| type| source ---|---|--- 2026-04-15 15:32:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjk7qcmrjv2g 2026-04-15 15:50:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjkaqjucrm2t...
CVE-2026-27292
creationtimestamp| type| source ---|---|--- 2026-04-15 01:19:06+00:00| seen| Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs 2026-04-15 11:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjtu5mxyn2k 2026-04-16 00:07:07+00:00| seen|...
CVE-2026-27288
creationtimestamp| type| source ---|---|--- 2026-04-15 00:18:27+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjimntrqsi2i...
CVE-2026-22828
creationtimestamp| type| source ---|---|--- 2026-04-14 16:51:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtoef7zj2m 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 17:28:30+00:00| seen|...
CVE-2025-65135
creationtimestamp| type| source ---|---|--- 2026-04-14 16:43:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhtagncml2g 2026-04-14 16:51:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtosxxmr2s...
Malicious Package
Overview pinstatsd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2025-13822
creationtimestamp| type| source ---|---|--- 2026-04-14 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2025-13822 2026-04-15 09:42:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116408066492828654...
CVE-2026-27681
creationtimestamp| type| source ---|---|--- 2026-04-14 01:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjg6jaq2s42h 2026-04-14 01:15:38+00:00| published-proof-of-concept| Telegram/j1YKUKFGBq5wmef4QEbA7k-TdRl9f0BaDNzVfGs6U0ZXPS4 2026-04-14 01:30:30+00:00| seen|...
CVE-2026-6187
creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:52+00:00| seen| Telegram/TSErhlT2llNPXhNLnZaIvAkEA2gU1lz2cwoIEiu2S6bYw...
CVE-2025-13025
creationtimestamp| type| source ---|---|--- 2026-04-13 17:59:50+00:00| seen| Telegram/v-1AydXySxiNxE6SaFVPXOMgwh9lcyinlmzJXhWqHW4 2026-09-09 05:00:11+00:00| seen| https://t.me/IntelEncyclopedia/2508 2026-09-10 00:00:42+00:00| seen| https://t.me/IntelEncyclopedia/2508...
EUVD-2026-21978
Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low. Users are recommended to upgrade to Apache Airflow 3.2.0,...
Malicious Package
Overview etsy-advocacy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...