11085 matches found
PYSEC-2026-1 A single post-release of dydx-v4-client contained obfuscated multi-stage loader
A PyPI user account compromised by an attacker and was able to upload a malicious version 1.1.5.post1 of the dydx-v4-client package. This version contains a highly obfuscated multi-stage loader that ultimately executes malicious code on the host system. While the final payload is not visible...
CVE-2025-68871
creationtimestamp| type| source ---|---|--- 2026-01-28 17:20:11+00:00| seen| Telegram/yXy36TX-l3HHyr8aIHw3JdopJLK3nb5QySa9H1H0VzeiNQU...
CVE-2025-7740
creationtimestamp| type| source ---|---|--- 2026-01-28 10:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2etilnc2c 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-09...
CVE-2025-68857
creationtimestamp| type| source ---|---|--- 2026-01-27 23:28:55+00:00| seen| Telegram/YNtd9hp8-fgDeBa8loSpBRJii6nAPxhmRO29fflkF0ZSQkw...
Malicious Package
Overview @santandergroup-uk/edgehome-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious Package
Overview @riag-libs/pattern-library-react-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Fake Microsoft Teams Billing Phishing Alerts Reach 6,135 Users via 12,866 Emails
Scammers are abusing Microsoft Teams invitations to send fake billing notices, with 12,866 emails reaching around 6,135 users in a phone-based phishing campaign...
GHSA-G5GC-H5HP-555F
creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:13+00:00| seen| https://gist.github.com/alon710/36dfb2017bc84d12c53f0d34b22f1f3f...
CVE-2026-22808
creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:38+00:00| seen| https://gist.github.com/alon710/6cb56ce49fdd250735cd1e3f48481606 2026-01-24 22:26:33+00:00| seen| https://gist.github.com/alon710/f30dfca4833be946bfbfe3ad5d0ceea4 2026-01-24 22:26:36+00:00| seen|...
CVE-2026-0895
creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:18+00:00| seen| https://gist.github.com/alon710/24f3c400b3623201c1df9a8ca513e039 2026-01-24 22:21:51+00:00| seen| https://gist.github.com/alon710/5ac50e78c989009cbc7a48f536fe1f0f 2026-01-24 22:21:54+00:00| seen|...
MAL-2026-495 Malicious code in h-jsencrypt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb69a1fb2f3c3ef16b7e30994095eb335b41563a498523667d83d60ed0c56c60 The package h-jsencrypt was found to contain malicious code. Source: ghsa-malware a2cacebaa99bf1715c395ba91c26e95c4ce77af5a16cbbcc4e5041c2a47b4143 An...
CVE-1999-0113
creationtimestamp| type| source ---|---|--- 2026-01-23 05:17:32+00:00| seen| https://bsky.app/profile/fets.bsky.social/post/3md2x4q763k27 2026-01-26 16:47:00+00:00| seen| https://vulnerability.circl.lu/bundle/1e1a5c92-386f-4bce-a79d-a0850f3526dd...
MAL-2026-484 Malicious code in translation-note (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07633850d68301541c30e7f731a444071e400f71083928dca6418a9a59c769a The package translation-note was found to contain malicious code. Source: ghsa-malware 95cfe5df95e94bc56327c2241fd1d850ee8bae580cdecfae84ee6f81f09150...
Malicious code in integromat-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de4e86762c4fcb7682615925818028501cfb55cdd9fdeaf238f2e186b1f121e The package integromat-ui was found to contain malicious code...
CVE-2026-21264
creationtimestamp| type| source ---|---|--- 2026-01-22 23:30:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dqiyfsi2r 2026-01-23 00:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2gqhpvgr2i 2026-02-13 04:55:25+00:00| seen|...
EUVD-2026-4178
Malicious code in cflashfiles PyPI...
CVE-2026-22461
creationtimestamp| type| source ---|---|--- 2026-01-22 17:44:05+00:00| seen| https://gist.github.com/Darkcrai86/74e2626fc165635cd0ee959be4d16af3...
EUVD-2026-4199
Malicious code in icloudprocessor PyPI...
CVE-2026-23524
creationtimestamp| type| source ---|---|--- 2026-01-21 22:18:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxpbmdl3m2g 2026-01-21 22:20:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxpemt7fi2o 2026-01-22 02:22:44+00:00| seen|...