19517 matches found
MAL-2025-47402 Malicious code in kecks (npm)
The package kecks was found to contain malicious code...
CVE-2025-37130
creationtimestamp| type| source ---|---|--- 2025-09-16 22:43:44+00:00| seen| Telegram/kguWd5Aun6eq72JVBm7iqZdRZAVyYP4th-x2becp-RgRVo...
CVE-2025-10533
creationtimestamp| type| source ---|---|--- 2025-09-16 13:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxg73ijtm2c 2025-09-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsj7rh2d 2026-04-13 17:58:03+00:00| seen|...
Malicious Package
Overview aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview openzeppelin-compact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in alert-codestreamer
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview alert-codestreamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in alert-codestreamer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47297 Malicious code in alert-codestreamer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
A Graph-Based Approach to Alert Contextualisation in Security Operations Centres
Interpreting the massive volume of security alerts is a significant challenge in Security Operations Centres SOCs. Effective contextualisation is important, enabling quick distinction between genuine threats and benign activity to prioritise what needs further analysis.This paper proposes a...
CVE-2025-43295
creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:30+00:00| seen| Telegram/dCqEynpwtr-y3I3ArdM10a2EZwz9RT5XZs7AQ3thZ3o9VYg...
Malicious code in consolergbcolor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 04beefffad3b4018eda21173a10a1dbebd8127bd9870d86e31894c6be592e107 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...
CVE-2025-59328
creationtimestamp| type| source ---|---|--- 2025-09-15 12:21:27+00:00| seen| https://seclists.org/oss-sec/2025/q3/167 2025-09-15 14:32:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyuzjwdl7c2o 2025-09-15 17:16:56+00:00| seen|...
Malicious Package
Overview dev.voltstro.nativearrayspanextensions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious Package
Overview basic-validator-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ECHO-21E1-980C-98E3 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-0245-A372-7F9E Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
Malicious Package
Overview mcp-chat-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-40687
creationtimestamp| type| source ---|---|--- 2025-09-11 12:36:18+00:00| seen| https://gist.github.com/Darkcrai86/b3420dd55f54cfd5f86a60bf88777fd9 2025-09-12 09:01:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lymvnh4wot2w...