GHSA-HJP7-QWRJ-6CC6

creationtimestamp| type| source ---|---|--- 2026-01-02 19:59:02+00:00| seen| https://gist.github.com/EbonJaeger/fbb406a1301a4e1bf0d8825c9b084ebb...

GHSA-93JC-VQQC-VVVH

creationtimestamp| type| source ---|---|--- 2026-01-02 18:53:14+00:00| seen| Telegram/jO9dryZvES5E-gtLxGYUB48gMevmZpZHBZ7ROvZGlwCxA 2026-01-02 21:55:06+00:00| published-proof-of-concept| Telegram/y2-HSAe3hVK2HXhNkMWkTOSOUWTyek7fe8J5U8wlfTOwBA 2026-01-24 22:43:43+00:00| seen|...

GHSA-7RQC-FF8M-7J23

creationtimestamp| type| source ---|---|--- 2026-01-02 18:52:46+00:00| seen| Telegram/3f3-cwfXIykKmhboQeDZ-9JfvsVfmMtyX9y0DYWKgM6OqHA 2026-01-02 21:54:27+00:00| published-proof-of-concept| Telegram/d-ziUJquW87C-wxQ1bihwuEueQX9ENOtUxcvU39erDutk3U 2026-01-24 22:43:41+00:00| seen|...

GHSA-F43R-CC68-GPX4

creationtimestamp| type| source ---|---|--- 2026-01-02 18:48:41+00:00| published-proof-of-concept| Telegram/SIlHdnSWOhxtT164bo5OUY813qzBPWb650GYgkhFr1n0D8 2026-01-02 21:52:17+00:00| published-proof-of-concept| Telegram/mK8o9C1rhrHkVcM37GZHvLPW6XA5mG-AmvsJea-RQorcPsU...

Malicious code in @ptest2535/l_woker_mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4196b81679a34023da03dc65cd5831c81e6c9d66d1a3617113d28a85b23c83c The package @ptest2535/lwokermal was found to contain malicious code. Source: ghsa-malware...

GHSA-3329-GHMP-JMV5

creationtimestamp| type| source ---|---|--- 2025-12-29 20:29:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115804745566303123...

GHSA-4675-36F9-WF6R

creationtimestamp| type| source ---|---|--- 2025-12-29 15:29:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803564473058280...

GHSA-M273-6V24-X4M4

creationtimestamp| type| source ---|---|--- 2025-12-29 15:29:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803564473058280...

GHSA-C67J-W6G6-Q2CM

creationtimestamp| type| source ---|---|--- 2025-12-23 22:57:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771354033133304 2026-01-13 16:10:43+00:00| seen| Telegram/NtGdm-nKviNCWHikD-PcF3b4R8AkgqcqlHzrx8XSXT7S4dA...

GHSA-73F7-3C45-6H89 vulnerabilities

Vulnerabilities for packages: chromium...

Malicious code in chai-async-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfd7db9210fae054def8abcb6989e1158a4774dbec18c08ac6eebcbf95ef753 The package chai-async-chains was found to contain malicious code. Source: ghsa-malware...

GHSA-22FW-4JQ7-G8R8

creationtimestamp| type| source ---|---|--- 2025-12-22 13:49:08+00:00| seen| https://bsky.app/profile/kravietz.agora.echelon.pl.ap.brid.gy/post/3malesa57lf62 2025-12-23 18:10:45+00:00| seen| https://bsky.app/profile/sodiboo.gaysex.cloud/post/3maoduvbi52r2 2025-12-23 22:59:53+00:00| seen|...

GHSA-73WF-3XMJ-X82Q

creationtimestamp| type| source ---|---|--- 2025-12-19 18:57:30+00:00| seen| https://seclists.org/oss-sec/2025/q4/288...

Malicious code in sonia3-npm-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339534853ebcb623a903a0515ab9ae854edaac8fdfec58d3edb454c501238d19 The package sonia3-npm-js was found to contain malicious code. Source: ghsa-malware 3b951ad6a6c46f78a032c0c93db496b6b13cfadccf178f195cd6c3f28531ed1e...

CVE-2025-68478

creationtimestamp| type| source ---|---|--- 2025-12-19 14:44:56+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4 2026-01-02 18:48:41+00:00| published-proof-of-concept| Telegram/SIlHdnSWOhxtT164bo5OUY813qzBPWb650GYgkhFr1n0D8...

Malicious code in viktor-xml-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f588bf6164c41e993943c30ac7d1a25c88c3de79469bb1a5d1a8a43448f22c31 The package viktor-xml-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in viktorparserctf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b7bb5e0b1f8fa179dfab5781def80ab5479ef699c58edf3b1e998c8fe7228f The package viktorparserctf2 was found to contain malicious code. Source: ghsa-malware 1b82b1d902169dd21a91960198cb2313aeea0d1a5d0db64c81d289a9632cd5...

GHSA-5CGR-J3JF-JW3V

creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...

GHSA-9XWC-HFWC-8W59

creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...

EUVD-2025-204011

Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin servers. This means malicious users can create an origin server on a compute node that record these headers when unsuspecting users connect to...