Malicious code in @astralcore/sl-aura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233 This WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to t...

MAL-2026-13258 Malicious code in bitcoinjs-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8981a1bdc42ac6f595b3805c959060201fc4eb0c39b5bf50b25c5d3d7cc398b5 [email protected] is a typosquat of bitcoinjs-lib that performs credential theft at module load. On require, index.js collects hostname, usernam...

MAL-2026-13349 Malicious code in mnemonic-to-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8871a9cd738ee7dbe2245e741d52afb659069bc6fcc7d5aa6cfb87bfad9dbcd On require, index.js serializes the full process.env along with hostname, username, homedir, platform, and cwd, base64-encodes the JSON blob, and...

MAL-2026-13214 Malicious code in @zzzcrypto/solana-spl-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ceac45508e2f9506a082b2195d3bae4b046f096d11856d72ea53f784ad5992e @zzzcrypto/[email protected] is a typosquat/impersonation of @solana/spl-token README self-describes as a 'drop-in replacement'; author metadata...

CVE-2026-16496

creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717 2026-08-29 20:00:06+00:00| seen| https://t.me/CyberDispatch/2484 2026-08-30 00:00:37+00:00| seen|...

CVE-2026-14869

creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717 2026-08-29 20:00:06+00:00| seen| https://t.me/CyberDispatch/2484 2026-08-30 00:00:37+00:00| seen|...

CVE-2026-17532

creationtimestamp| type| source ---|---|--- 2026-08-05 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96706 2026-08-05 10:00:05+00:00| published-proof-of-concept| Telegram/Nl8mRngxmNEif6AAKsIvUzhnsF325qswadlkhxgWlmwB0s 2026-08-05 21:00:04+00:00| seen|...

MAL-2026-12085 Malicious code in @wethenorth12/bip39-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4fe167500fb5cab9e31d00a5239bf7ce46ba4205b4c6c044367f424d3285687 Package presents itself as a drop-in replacement for the popular bip39 library but ships a credential stealer in its main entry. On require, the modu...

CVE-2019-10967

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:11+00:00| seen| https://t.me/timcorehacking/498 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/498...

CVE-2020-9687

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:08+00:00| seen| https://t.me/timcorehacking/946 2026-08-06 00:00:56+00:00| seen| https://t.me/timcorehacking/946...

CVE-2020-5895

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:08+00:00| seen| https://t.me/timcorehacking/882 2026-08-06 00:00:51+00:00| exploited| https://t.me/timcorehacking/882...

CVE-2019-16941

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/642 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/642...

CVE-2019-12874

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/516 2026-08-06 00:00:48+00:00| seen| https://t.me/timcorehacking/516...

CVE-2019-1291

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/604 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/604 2026-08-22 21:00:05+00:00| seen| https://t.me/nuancesprognews/560 2026-08-23 00:00:13+00:00| seen|...

CVE-2019-10965

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/498 2026-08-06 00:00:48+00:00| seen| https://t.me/timcorehacking/498...

CVE-2020-10599

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...

CVE-2020-2167

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...

CVE-2020-2166

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...

CVE-2020-1991

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/841 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/841...

CVE-2019-17570

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...