CVE-2023-53431

creationtimestamp| type| source ---|---|--- 2025-09-18 16:45:34+00:00| seen| Telegram/ZPOxjpjyAbwLHS3qvLJrJBx-kTECRwAUouCcFYLDi76CWs...

CVE-2025-9972

creationtimestamp| type| source ---|---|--- 2025-09-17 07:40:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzdgsyn7v2a...

CVE-2025-43287

creationtimestamp| type| source ---|---|--- 2025-09-17 04:45:56+00:00| seen| Telegram/fDMyMJAv0zZ05H1qj7ApP09ICrzj5rbfQUvBqa5TLqCkSsA...

MAL-2025-47402 Malicious code in kecks (npm)

The package kecks was found to contain malicious code...

CVE-2025-37130

creationtimestamp| type| source ---|---|--- 2025-09-16 22:43:44+00:00| seen| Telegram/kguWd5Aun6eq72JVBm7iqZdRZAVyYP4th-x2becp-RgRVo...

CVE-2025-10533

creationtimestamp| type| source ---|---|--- 2025-09-16 13:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxg73ijtm2c 2025-09-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsj7rh2d 2026-04-13 17:58:03+00:00| seen|...

Malicious Package

Overview aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview openzeppelin-compact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alert-codestreamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in alert-codestreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47297 Malicious code in alert-codestreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Graph-Based Approach to Alert Contextualisation in Security Operations Centres

Interpreting the massive volume of security alerts is a significant challenge in Security Operations Centres SOCs. Effective contextualisation is important, enabling quick distinction between genuine threats and benign activity to prioritise what needs further analysis.This paper proposes a...

CVE-2025-43295

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:30+00:00| seen| Telegram/dCqEynpwtr-y3I3ArdM10a2EZwz9RT5XZs7AQ3thZ3o9VYg...

Malicious code in consolergbcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04beefffad3b4018eda21173a10a1dbebd8127bd9870d86e31894c6be592e107 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

CVE-2025-59328

creationtimestamp| type| source ---|---|--- 2025-09-15 12:21:27+00:00| seen| https://seclists.org/oss-sec/2025/q3/167 2025-09-15 14:32:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyuzjwdl7c2o 2025-09-15 17:16:56+00:00| seen|...

Malicious Package

Overview dev.voltstro.nativearrayspanextensions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview basic-validator-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ECHO-21E1-980C-98E3

Bulletin has no description...

ECHO-0245-A372-7F9E

Bulletin has no description...

Malicious Package

Overview mcp-chat-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...