CVE-2025-47398

creationtimestamp| type| source ---|---|--- 2026-02-02 16:18:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvaqwvlkb2x 2026-02-06 05:15:47+00:00| seen| https://notnow.dev/objects/7e03b73a-ee5a-44fc-b7e0-8cb584640a7d...

Malicious Package

Overview react-native-expofp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-631 Malicious code in cowsay-caps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17661a2b5a74d9c2f32dceee01043881ce230427c3121c4bdd6f43987e49765e The package cowsay-caps was found to contain malicious code...

MAL-2026-634 Malicious code in eslint-config-minecraft-scripting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965724c03399dbf45fac622dbfa8cb38e94e6cf7e3c137390da6e2818b9f073b The package eslint-config-minecraft-scripting was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-minecraft-scripting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965724c03399dbf45fac622dbfa8cb38e94e6cf7e3c137390da6e2818b9f073b The package eslint-config-minecraft-scripting was found to contain malicious code. Source: ghsa-malware...

GHSA-PJ9H-FMXG-JWMR vulnerabilities

Vulnerabilities for packages: chromium...

CERTFR-2026-ALE-001

creationtimestamp| type| source ---|---|--- 2026-01-30 11:02:01+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115983706971608725...

CVE-2025-39490

creationtimestamp| type| source ---|---|--- 2026-01-29 17:22:15+00:00| seen| Telegram/eR7xGnNWU7JWkc99SGTnYFcvM6hfVlfsSpY-TqDfNslGI...

CVE-2026-1237

creationtimestamp| type| source ---|---|--- 2026-01-29 15:40:51+00:00| seen| https://gist.github.com/alon710/e49bd8e494bc74785456a45ff96b4d99...

CVE-2025-67952

creationtimestamp| type| source ---|---|--- 2026-01-29 03:21:49+00:00| seen| Telegram/keSNEMnsp0L6G3NDKAlSA2LDxW6SGZxuWSh4xLVAnJ4bS9E...

CGA-V7M7-2C4G-5VFX

Bulletin has no description...

PYSEC-2026-1 A single post-release of dydx-v4-client contained obfuscated multi-stage loader

A PyPI user account compromised by an attacker and was able to upload a malicious version 1.1.5.post1 of the dydx-v4-client package. This version contains a highly obfuscated multi-stage loader that ultimately executes malicious code on the host system. While the final payload is not visible...

CVE-2025-68871

creationtimestamp| type| source ---|---|--- 2026-01-28 17:20:11+00:00| seen| Telegram/yXy36TX-l3HHyr8aIHw3JdopJLK3nb5QySa9H1H0VzeiNQU...

CVE-2025-7740

creationtimestamp| type| source ---|---|--- 2026-01-28 10:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2etilnc2c 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-09...

CVE-2025-68857

creationtimestamp| type| source ---|---|--- 2026-01-27 23:28:55+00:00| seen| Telegram/YNtd9hp8-fgDeBa8loSpBRJii6nAPxhmRO29fflkF0ZSQkw...

Malicious Package

Overview @santandergroup-uk/edgehome-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview @riag-libs/pattern-library-react-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Fake Microsoft Teams Billing Phishing Alerts Reach 6,135 Users via 12,866 Emails

Scammers are abusing Microsoft Teams invitations to send fake billing notices, with 12,866 emails reaching around 6,135 users in a phone-based phishing campaign...

GHSA-G5GC-H5HP-555F

creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:13+00:00| seen| https://gist.github.com/alon710/36dfb2017bc84d12c53f0d34b22f1f3f...

CVE-2026-22808

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:38+00:00| seen| https://gist.github.com/alon710/6cb56ce49fdd250735cd1e3f48481606 2026-01-24 22:26:33+00:00| seen| https://gist.github.com/alon710/f30dfca4833be946bfbfe3ad5d0ceea4 2026-01-24 22:26:36+00:00| seen|...