CVE-2026-55857

creationtimestamp| type| source ---|---|--- 2026-08-29 04:33:12+00:00| seen| https://gist.github.com/alon710/3380ae01f52344248b245161333046b0...

GHSA-QXVW-FVWX-5CP7

creationtimestamp| type| source ---|---|--- 2026-08-29 04:33:12+00:00| seen| https://gist.github.com/alon710/3380ae01f52344248b245161333046b0...

CVE-2026-55858

creationtimestamp| type| source ---|---|--- 2026-08-29 03:32:23+00:00| seen| https://gist.github.com/alon710/8d1aa47ee5a874bddf01dd7e56e42801...

GHSA-XVR9-35CR-46V9

creationtimestamp| type| source ---|---|--- 2026-08-29 03:32:22+00:00| seen| https://gist.github.com/alon710/8d1aa47ee5a874bddf01dd7e56e42801...

CVE-2026-55859

creationtimestamp| type| source ---|---|--- 2026-08-29 02:32:11+00:00| seen| https://gist.github.com/alon710/dd09c3ef696a75a72346fac91d4e54bd...

GHSA-5RQC-86VF-G8R2

creationtimestamp| type| source ---|---|--- 2026-08-29 02:32:11+00:00| seen| https://gist.github.com/alon710/dd09c3ef696a75a72346fac91d4e54bd...

CVE-2026-55860

creationtimestamp| type| source ---|---|--- 2026-08-29 01:40:29+00:00| seen| https://gist.github.com/alon710/607da531ae276a39a8c057ba4505abda...

GHSA-C857-9X2M-CVH2

creationtimestamp| type| source ---|---|--- 2026-08-29 01:40:29+00:00| seen| https://gist.github.com/alon710/607da531ae276a39a8c057ba4505abda...

GHSA-J5G3-42WP-GQM3

creationtimestamp| type| source ---|---|--- 2026-08-29 01:28:40+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mu6pxqzov725 2026-08-29 06:33:12+00:00| seen| https://gist.github.com/alon710/bca69671d982aa5325684eebc9b91ff4...

CVE-2026-55848

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ivivh26 2026-08-29 00:35:05+00:00| published-proof-of-concept| https://github.com/mapfish/mapfish-print/security/advisories/GHSA-5v29-34h8-v68r 2026-08-29...

MSC-2026-11522

Active npm supply chain compromise of @7nohe/openapi-react-query-codegen 150,000 weekly downloads, linked to the ongoing Mini Shai-Hulud campaign. An unprotected GitHub Actions release workflow let any account publish fork contents under the repository's trusted-publishing identity, producing ten...

CVE-2026-55855

creationtimestamp| type| source ---|---|--- 2026-08-28 23:31:57+00:00| seen| https://gist.github.com/alon710/6f86711971bb7ed1944c7170d2f2eeef 2026-08-29 00:00:52+00:00| seen| https://gist.github.com/alon710/6f86711971bb7ed1944c7170d2f2eeef...

GHSA-G5XC-5W98-JFVM

creationtimestamp| type| source ---|---|--- 2026-08-28 23:31:57+00:00| seen| https://gist.github.com/alon710/6f86711971bb7ed1944c7170d2f2eeef 2026-08-29 00:00:52+00:00| seen| https://gist.github.com/alon710/6f86711971bb7ed1944c7170d2f2eeef...

CVE-2026-55696

creationtimestamp| type| source ---|---|--- 2026-08-28 22:35:07+00:00| published-proof-of-concept| https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-f2xf-7x3g-4272...

CVE-2026-55763

creationtimestamp| type| source ---|---|--- 2026-08-28 22:35:05+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-v358-wf77-39xv...

CVE-2026-55761

creationtimestamp| type| source ---|---|--- 2026-08-28 22:32:24+00:00| seen| https://gist.github.com/alon710/e4bd6c41f3caf02d2208d3310d5a1edf 2026-08-29 00:00:52+00:00| seen| https://gist.github.com/alon710/e4bd6c41f3caf02d2208d3310d5a1edf...

GHSA-X626-FCWX-F5PC

creationtimestamp| type| source ---|---|--- 2026-08-28 22:32:24+00:00| seen| https://gist.github.com/alon710/e4bd6c41f3caf02d2208d3310d5a1edf 2026-08-29 00:00:52+00:00| seen| https://gist.github.com/alon710/e4bd6c41f3caf02d2208d3310d5a1edf...

CVE-2025-63607

creationtimestamp| type| source ---|---|--- 2026-08-28 22:31:17+00:00| seen| https://gist.github.com/7Horrus/7c419516b064f6bac638736819e24583 2026-08-29 00:00:52+00:00| seen| https://gist.github.com/7Horrus/7c419516b064f6bac638736819e24583...

GHSA-P378-JP5R-GPGW

creationtimestamp| type| source ---|---|--- 2026-08-28 21:31:53+00:00| seen| https://gist.github.com/alon710/f6616451da7f3f1b989952d24a3d867c...

Embedded Malicious Code

Overview @7nohe/openapi-react-query-codegen is an OpenAPI React Query Codegen Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a destructive worm and credential harvester. A malicious actor exploited a comment-triggered GitHub Actions workflow by commentin...