GHSA-48QW-824M-86PR

creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...

CVE-2025-66680

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:27+00:00| seen| Telegram/Go2mbO6T6ENYXGQQscwFrV9HUbwocawJhfgUeLLUItaC9Ko 2026-07-16 19:00:28+00:00| seen| Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0 2026-07-17 00:00:44+00:00| seen|...

CVE-2016-5183

creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:04+00:00| seen| https://t.me/KaitNews/312 2026-07-17 00:00:51+00:00| seen| https://t.me/KaitNews/312...

CVE-2026-15013

creationtimestamp| type| source ---|---|--- 2026-07-16 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116928127100536568 2026-07-16 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z 2026-07-16 06:26:05+00:00| seen|...

MAL-2026-10762 Malicious code in @edgecommons/edgecommons (npm)

The @edgecommons/edgecommons package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

CVE-2026-52893

creationtimestamp| type| source ---|---|--- 2026-07-15 23:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w 2026-07-16 00:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i...

CVE-2026-52891

creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25 2026-07-16 00:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s 2026-07-18 04:18:04+00:00| seen|...

CVE-2026-53024

creationtimestamp| type| source ---|---|--- 2026-07-15 14:48:08+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqoxopukfd2w...

Malicious code in install-skia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b665b508eeae9e0e619ed7b68e3a43248cd81d67d40a0516bbd62981ddb2359f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-15627

creationtimestamp| type| source ---|---|--- 2026-07-14 06:17:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlkokrxlt2x 2026-07-19 20:26:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmhjf3zn2i...

CVE-2026-61504

creationtimestamp| type| source ---|---|--- 2026-07-14 03:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc7fbibz2z...

CVE-2026-2002

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/90102 2026-07-14 00:00:37+00:00| seen| https://t.me/GithubRedTeam/90102 2026-07-15 00:00:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90102...

MAL-2026-10475 Malicious code in @dervix/socket.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c299d96dca6144eec3e8be8770c98430139e9b6b982762da448ef50b7bde06a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-58065

creationtimestamp| type| source ---|---|--- 2026-07-13 17:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkatd3dmc2x 2026-07-13 18:15:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcd6u55r2f 2026-07-13 22:10:25+00:00| seen|...

CVE-2026-40553

creationtimestamp| type| source ---|---|--- 2026-07-13 12:15:08+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-40467 2026-07-13 13:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtfjqc2y26 2026-07-13 16:14:50+00:00| seen|...

CVE-2026-57710

creationtimestamp| type| source ---|---|--- 2026-07-13 11:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkzd2pp525...

CVE-2026-57389

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkd54qgp2i 2026-07-16 07:56:26+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5hzhvd2g...

CVE-2026-10085

creationtimestamp| type| source ---|---|--- 2026-07-13 09:46:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfvj6uhi2x 2026-07-13 09:48:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjfz2l7bi2f 2026-07-13 09:48:32+00:00| seen|...

Malicious code in abuden4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c566b19e3b2fffddf78ea97e8aadc31f0e931f1bf708653194acaab8521283c The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-10331 Malicious code in kirkland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbd3da78615dc607bb287e809874ccce081e816a5eeb1120421118da70bcba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...