CVE-2026-38426

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

CVE-2026-38427

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

CVE-2026-38422

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:06+00:00| seen| https://t.me/GithubRedTeam/85810 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks targeting financial and cryptocurrency organizations. RemotePE, per NCC Group subsidiary Fox-IT, is part of a multi-stage attack chain...

CVE-2026-36239

creationtimestamp| type| source ---|---|--- 2026-05-25 02:00:04+00:00| seen| https://t.me/GithubRedTeam/85759 2026-05-25 03:00:10+00:00| seen| Telegram/PWXxTbzLBS2I2NTEEZXYxWglH9J71PY-BvJO95sfjgRqY3E 2026-05-25 09:00:04+00:00| seen| Telegram/hq1WnakkbxJpSdatpwq9NAKRiUtHFa8ysgfQqaCqIO8mwqo...

Malicious code in wallet-agent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb49d047eeab68307095cf3a30ff0d42d745855890f181e4cb53dc2f6903e91 dist/agent.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org used in a fetch/POST call near references to process.env. The...

MAL-2026-4708 Malicious code in wallet-agent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb49d047eeab68307095cf3a30ff0d42d745855890f181e4cb53dc2f6903e91 dist/agent.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org used in a fetch/POST call near references to process.env. The...

CVE-2026-1802

creationtimestamp| type| source ---|---|--- 2026-05-22 17:10:55+00:00| seen| https://bsky.app/profile/theresidentmachine.bsky.social/post/3mmhgid6im32q...

Malicious code in events-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...

MAL-2026-4555 Malicious code in events-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...

CVE-2026-0211

creationtimestamp| type| source ---|---|--- 2026-05-22 16:00:05+00:00| seen| https://t.me/GithubRedTeam/85414 2026-05-22 19:00:10+00:00| seen| Telegram/GxW7z8duNlVdfiWWsv41lYfs7S7xkZAHymlGuRAZQODzxg...

CVE-2026-36227

creationtimestamp| type| source ---|---|--- 2026-05-22 15:00:15+00:00| seen| Telegram/dTfSHcoUcJaeOuFARbGp4aQ01psDVJQvBc7YPH7AO1ZEIM0...

CVE-2026-36226

creationtimestamp| type| source ---|---|--- 2026-05-22 15:00:15+00:00| seen| Telegram/dTfSHcoUcJaeOuFARbGp4aQ01psDVJQvBc7YPH7AO1ZEIM0...

CVE-2026-36228

creationtimestamp| type| source ---|---|--- 2026-05-22 15:00:15+00:00| seen| Telegram/dTfSHcoUcJaeOuFARbGp4aQ01psDVJQvBc7YPH7AO1ZEIM0...

CVE-2026-35058

creationtimestamp| type| source ---|---|--- 2026-05-22 13:23:01+00:00| seen| https://t.me/bdufstecru/3185 2026-06-09 10:28:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116719675940851268...

CVE-2024-53667

creationtimestamp| type| source ---|---|--- 2026-05-22 11:00:14+00:00| seen| Telegram/Ijp4jLwZAukIpjn8nmvArm7-nJ19glZ2axxpP-42cGx43y8 2026-05-22 15:00:07+00:00| seen| Telegram/QQT-Q6OUMbbPAXT-HqeuIDXp1trXX8UiN3jKLc4d4AIZQ...

MAL-2026-4395 Malicious code in @inetafrica/open-claudia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2fde4b2f69d2aa99c4fcc7ed5b04bd029394caf40067eb2be6987bf30a1b03 The package ships multiple modules health.js, setup.js, bot.js, core/media.js, core/handlers.js that combine childprocess, fs, and https to build and...

Malicious code in @inetafrica/open-claudia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b3881ec598069649e57612f04359886ef22331899541885248ea6a0a41bce2 Multiple files in this package contain a Telegram-bot-based command-and-control and exfiltration framework wired to install/runtime-reachable code...

CVE-2025-6919

creationtimestamp| type| source ---|---|--- 2026-05-22 09:13:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmglswv2uz2c...

CVE-2026-46680

creationtimestamp| type| source ---|---|--- 2026-05-21 10:00:04+00:00| seen| https://t.me/GithubRedTeam/85189 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI 2026-05-21 21:00:05+00:00| seen| Telegram/6gh1HJgE3RFVn7K8UtbcJPpJwEYzEQXCykvkUTLZjGZEDc 2026-05-2...