`pretty-changelog-logger` was removed from crates.io for malicious code

pretty-changelog-logger contains a build script build.rs that acts as a loader/dropper for malicious payloads. The malicious crate had 3 versions published on 2026-04-08 that had a total of 2239 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecti...

RUSTSEC-2026-0100 `pretty-changelog-logger` was removed from crates.io for malicious code

pretty-changelog-logger contains a build script build.rs that acts as a loader/dropper for malicious payloads. The malicious crate had 3 versions published on 2026-04-08 that had a total of 2239 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecti...

RUSTSEC-2026-0101 `safe-agent-rs` was removed from crates.io for being affiliated with malicious code

While safe-agent-rs did not directly contain malicious code, it was owned by the same user as pretty-changelog-logger and microsoftsystem64. safe-agent-rs also appeared to be imitating a different websocket library. We decided to remove it out of an abundance of caution. This crate had 2 versions...

CVE-2021-32784

creationtimestamp| type| source ---|---|--- 2026-04-13 09:33:18+00:00| seen| https://gist.github.com/b0b0haha/3e0a988ffbf4047ad48b70a406cf6492...

CVE-2026-6164

creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:08+00:00| seen| Telegram/IHOzCDm6ocMXwhKClYe85fycTrPO6GtT3pOiprPCJXwKD8...

CVE-2026-6163

creationtimestamp| type| source ---|---|--- 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE 2026-04-13 07:18:08+00:00| seen| Telegram/IHOzCDm6ocMXwhKClYe85fycTrPO6GtT3pOiprPCJXwKD8...

CVE-2026-6136

creationtimestamp| type| source ---|---|--- 2026-04-13 01:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdo435jy72t 2026-04-13 01:17:42+00:00| published-proof-of-concept| Telegram/nag6kHTmr7R2m3RBAp9Z6zI9Kn5ruvnm4vlyMwU2lthiM 2026-05-28 08:07:08+00:00| seen|...

Eaton End-of-Life Devices Detection

The current plugin identifies Eaton devices that are end-of-life, i.e., still supported but have a discontinued date announced. Eaton Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last ti...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2026-1568)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1568 advisory. A flaw in the gix-date library can generate invalid non-UTF8 strings, leading to undefined behavior when processed. The most likely impact from a successful attack is to data integrity, by the...

Medium: rust

Issue Overview: A flaw in the gix-date library can generate invalid non-UTF8 strings, leading to undefined behavior when processed. The most likely impact from a successful attack is to data integrity, by the malicious data being able to corrupt data being hold in memory and to system availabilit...

PT-2026-32266

Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information...

CVE-2026-6130

creationtimestamp| type| source ---|---|--- 2026-04-12 23:15:15+00:00| published-proof-of-concept| Telegram/hilS-ssmivi8q1jRkIVKk8g--dsfivFEr3ZeZAGEjyA5lds 2026-04-13 02:02:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjdrjtah7c2r...

CVE-2026-6113

creationtimestamp| type| source ---|---|--- 2026-04-12 05:16:17+00:00| published-proof-of-concept| Telegram/rbF7fSnY0VEd6aCx4theR2I2I4JGiCz6cyJ3UThbj-lLIU 2026-04-12 05:43:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnfnl6w62s 2026-04-12 06:15:45+00:00| seen|...

CVE-2026-6110

creationtimestamp| type| source ---|---|--- 2026-04-12 05:16:17+00:00| published-proof-of-concept| Telegram/rbF7fSnY0VEd6aCx4theR2I2I4JGiCz6cyJ3UThbj-lLIU 2026-04-12 05:18:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjblzcg4gt2r 2026-04-12 06:45:10+00:00| seen|...

CVE-2018-25248

creationtimestamp| type| source ---|---|--- 2026-04-11 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj6xkzjqmn2e...

GHSA-4GR2-CR97-Q9FX

creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:45+00:00| seen| Telegram/oNJqzE-05Zhzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w...

CVE-2026-4154

creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:29+00:00| seen| Telegram/9p2zwy9MZzhVwoc6VK1G-jeZ0lfiSFc0xC5yOTrHz-Zg8Sw 2026-04-11 05:04:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj72qrski22s 2026-04-15 00:37:07+00:00| seen|...

CVE-2026-5207

creationtimestamp| type| source ---|---|--- 2026-04-11 02:10:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6r3a35zt2r...

CVE-2026-40199

creationtimestamp| type| source ---|---|--- 2026-04-11 01:45:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6pnsttg52t 2026-04-13 18:01:28+00:00| published-proof-of-concept| Telegram/GGU4l3ghB8B3Ai9EUxQ7xduUqm6NQYmTwZHkJoJpqeQPEQk...

CVE-2026-34080

creationtimestamp| type| source ---|---|--- 2026-04-10 23:50:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6j7xzl4f2a...