42697 matches found
MAL-2026-10833 Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ebdefd4ff4715215a3a457497ee797677c748f28b881a45b05fda760142b5e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10839 Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fee530f600c3dda2f184f9f4cbeb4dbe23b98fa5c6e426e89afceffadce4175d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10857 Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19008091c460cf10b254f3077108bad3b1c5289e85ae59ba7b873aff7d96866d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10840 Malicious code in @gocortexio/npmgremlinbox-ms-lpl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c00cf6119e52189754e58f2c2460b83968a20c5086aa9424d58123b077c9e7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10822 Malicious code in @gocortexio/npmgremlinbox-eupl-3-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef5d1488a7448aca043f2c93fd927103279b86134ea8a25e3f86ae29aaa11003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10824 Malicious code in @gocortexio/npmgremlinbox-gpl-2-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab52db644e1790e6fec7814ae119abd04ec6cb63173abc691f34ede1d7959b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10816 Malicious code in @gocortexio/npmgremlinbox-cpol-1-02 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2184d51efaa813eba204f724caf876441f354323d358251674a60def88a83e9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10810 Malicious code in @gocortexio/npmgremlinbox-cddl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619607f5798c23f341f128fc384bcdbe47227d125c7377a64a950cc36c6c4391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10829 Malicious code in @gocortexio/npmgremlinbox-lgpl-2-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57c01ac5110fda0b2a3a6bf1ee06fb637561e65d36e549ed3d2bc355183185b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10806 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-2-1-jp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b1f86538204c3996ab56915ddff5fcd4dc9f0606c097cd3d03e17c8e89c4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10789 Malicious code in @gocortexio/npmgremlinbox-apsl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7d3ddf2b4ebddd380dc96c807b2288155f0590b0260471b11902d4a0f66dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10787 Malicious code in @gocortexio/npmgremlinbox-agpl-3-0-only (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b8fc829bb9f06d6a3994a04e58fa96264a47e68e192ccbee66e67d227bb05d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10796 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac07dbbcaab394576264b09782849aa49feace0efe500ab7e1f0967a10649718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10863 Malicious code in telebot-bot-run (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c556b9ded1648a2523210bf518dea35324c749733eabeef3268795351b1b9c On import, telebot-bot-run 0.3 executes two attacker-controlled code paths against the installer's host. First, the top-level module fetches...
MAL-2026-10782 Malicious code in zoom-widget-xss-poc-paresh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12586eeb5b7eb0c053d90b49fd966fe32f05fe1f551cfd36120de1ce25b34fea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10780 Malicious code in data-parser-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 55aca4874dc8f9716a1fb1dc61088cf485bee1b7a1ec8a5dc8c19aabff2c71fd If using the provided functionality like parsejson or parsexml functions, the package will install a Mythic/Poseidon C2 framework beacon and ensure its...
CVE-2026-64182
creationtimestamp| type| source ---|---|--- 2026-07-19 17:12:32+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqzbmmttji2c 2026-07-19 18:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzehgdfwk2i...