CVE-2025-59481

creationtimestamp| type| source ---|---|--- 2025-10-15 14:16:05+00:00| seen| Telegram/EoiprTyskng0KHCJL7AT9DJwBx-4M2ZHKuB4FYrrvAR6-Y 2026-02-04 19:28:38+00:00| seen| Telegram/00DHTaU6lTWShuv9TngbZkyCHrkrFZTa0zsIsXVjILusDA...

Malicious Package

Overview cryptocom-private-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview curve-ui-kit-security-notice is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-11623

creationtimestamp| type| source ---|---|--- 2025-10-15 01:58:41+00:00| seen| https://poliverso.org/objects/0477a01e-a74d375c-c413eae3a2f903b8...

CVE-2024-50571

creationtimestamp| type| source ---|---|--- 2025-10-14 18:17:41+00:00| seen| Telegram/HpzjxqiGLtm7b6F-ayme7ZHqHNvh0kEBjBtTOOaZs67yY...

CVE-2025-25253

creationtimestamp| type| source ---|---|--- 2025-10-14 18:17:31+00:00| seen| Telegram/7DSe42ElHDKq2nxsDFHcYpUxpCQjTYbZ6NZaT2s57pWzLE...

CVE-2025-59494

creationtimestamp| type| source ---|---|--- 2025-10-14 16:13:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0311 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:24:50+00:00| seen|...

Microsoft Windows Remote Desktop Services 授权问题漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. An authorization issue vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

CVE-2025-10557

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:35+00:00| seen| Telegram/WM72dKC9JfGAo4CSStxbpLJ2VPHuwP9d0ucsocDyuRJiGyg...

Malicious Package

Overview internallibv14 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Exploit for Use After Free in Microsoft

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Dete...

CVE-2025-11518

creationtimestamp| type| source ---|---|--- 2025-10-11 09:17:11+00:00| seen| Telegram/Ql29tSAte7BFaSNSVPXra7LgWLH2fJoYi0dRwAjSjSvT7A...

CVE-2025-58287

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:57+00:00| seen| Telegram/kmjuKfn41MRsce8zAIF3MLxJ0ho7Ipf0hb9FwZthKDgLD-c...

Malicious code in mcp-runcommand-server2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 36fb61d44529c380f204d5a210017989695ef39df6adfce7ccfb08e48a17b594 Package starts a reverse shell to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-191647 Malicious code in mcp-runcommand-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17f8adb9e7e30e13f8656300881d4e04975f499c03c2f1dbea2e00fd86c357a5 Package starts a reverse shell to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

CVE-2025-21053

creationtimestamp| type| source ---|---|--- 2025-10-10 07:09:31+00:00| seen| Telegram/UQBzo0gNemkavBCAEPU8gEzsBMEzXruSUAJE88fKV1dzo...

EUVD-2025-33631

Malicious code in orbital-ledger npm...

EUVD-2025-33632

Malicious code in react-outcome-error-alert npm...

MAL-2025-48267 Malicious code in react-outcome-error-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf316b6e96271df51ad30f147aa205bb372c306b2a929a854bafb68c41a5cf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-outcome-error-alert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...