CVE-2026-49764

creationtimestamp| type| source ---|---|--- 2026-06-15 18:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modvd23ofh22 2026-06-15 21:13:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe77xkqrv2m 2026-06-16 05:00:55+00:00| seen|...

MAL-2026-5787 Malicious code in @solana-labs/spl-toke (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2ec34996ab8cff20d9ba12cd9f5a8a75346c4e5e25d7c3fd5adc7bb7045f64 Package name @solana-labs/spl-toke is a likely confusion-attack against the well-known @solana/spl-token SPL token client missing trailing n, differe...

GHSA-95QP-CMMW-MGQV @angular/service-worker: Request Credential & Cache Policy Stripping

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During thi...

CVE-2018-25437

creationtimestamp| type| source ---|---|--- 2026-06-15 16:52:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modqnrcxe32b...

CVE-2019-25746

creationtimestamp| type| source ---|---|--- 2026-06-15 16:47:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modqest7632u...

WordPress Abandoned Contact Form 7 plugin <= 2.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by g0wthr in WordPress Plugin Abandoned Contact Form 7 versions = 2.5...

Malicious code in neural-network-scan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898c75e5a6ae94d115820736ffd2ca4cb948f72655d5c0175a3432cec835768c The package ships a collect.js script that imports childprocess and performs an HTTP POST carrying host identifiers hostname referenced multiple time...

CVE-2026-12162

creationtimestamp| type| source ---|---|--- 2026-06-15 16:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12162 2026-06-16 03:52:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moevk7tknm2p...

CVE-2026-12161

creationtimestamp| type| source ---|---|--- 2026-06-15 16:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12161 2026-06-16 03:47:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moevbbfxz62m 2026-06-17 06:00:26+00:00| seen|...

CVE-2018-25436

creationtimestamp| type| source ---|---|--- 2026-06-15 15:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnfxlk642w...

Malicious code in nativescript-swisspost-pcc-creative-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c9ef8861d14485e696e98c66d95ee5c2a5a608b213841c9c18b254003ae049 Package masquerades as an internal Swiss Post NativeScript package name nativescript-swisspost-pcc-creative-editor, description literally Security Po...

MAL-2026-5793 Malicious code in nativescript-swisspost-pcc-creative-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c9ef8861d14485e696e98c66d95ee5c2a5a608b213841c9c18b254003ae049 Package masquerades as an internal Swiss Post NativeScript package name nativescript-swisspost-pcc-creative-editor, description literally Security Po...

MAL-2026-5807 Malicious code in sam-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e593046a8f405a1a571d19aaa6bd46db57c4a22fce4b9acfc114dd4eb8ffb6 [email protected] is a malicious package whose only purpose is to deliver a prompt-injection payload targeting AI coding assistants Copilot, Cursor,...

CVE-2026-3375

creationtimestamp| type| source ---|---|--- 2026-06-15 15:38:06+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3modmiexfw62m...

Malicious code in vaults-monitor-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c6b9e59e86c40858cb47e91d597b3776fea71def7feb3ca11833625fa3923 On npm install, the package's preinstall hook node postinstall.js || true executes automatically. The script collects hostname, username, and current...

MAL-2026-5779 Malicious code in hemi-supply-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41be27601d38eb5c0b527a9ec22b7516734e8eae985a2607ae6d70878f5f1d9 package.json declares a preinstall hook node postinstall.js that fires automatically on npm install. The script collects host identity os.hostname,...

CVE-2026-5038

creationtimestamp| type| source ---|---|--- 2026-06-15 14:30:59+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3modiqffra227 2026-06-17 20:11:38+00:00| seen| https://gist.github.com/alon710/5e84b244224c89ffba5a0429bff51a5c...

CVE-2026-34024

creationtimestamp| type| source ---|---|--- 2026-06-15 13:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modensuage2e...

CVE-2026-49770

creationtimestamp| type| source ---|---|--- 2026-06-15 13:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modeknoxnr2b 2026-06-15 21:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moea74g52u2m 2026-06-16 01:01:01+00:00| seen|...

CVE-2019-25746 WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter

WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicatequoteinvoice and...