Malicious code in blackbeards-navigator (npm)

Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...

CVE-2026-37567

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:10+00:00| seen| https://gist.github.com/sgInnora/5aa1682c359a4f4ced53fc2408936e82...

CVE-2026-7489

creationtimestamp| type| source ---|---|--- 2026-04-30 02:20:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html...

CVE-2026-0204

creationtimestamp| type| source ---|---|--- 2026-04-29 19:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwybg7h2w 2026-04-29 19:18:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mknsuzqutq2t 2026-04-30 06:01:26+00:00| seen|...

CVE-2026-6253

creationtimestamp| type| source ---|---|--- 2026-04-29 07:06:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkmjxidnro2m 2026-04-29 07:10:54+00:00| seen| https://mastodon.social/users/bagder/statuses/116486743707813679 2026-04-29 07:11:04+00:00| seen|...

CVE-2026-40560

creationtimestamp| type| source ---|---|--- 2026-04-29 00:38:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkluc4fnnn2x 2026-04-29 00:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkluc5hnxw2k...

CVE-2026-23561

creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 01:49:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-citrix-xenserver 2026-04-29 12:45:36+00:00| seen|...

CVE-2026-7214

creationtimestamp| type| source ---|---|--- 2026-04-28 05:55:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkjvkig2yj2x...

CVE-2026-30350

creationtimestamp| type| source ---|---|--- 2026-04-28 01:12:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjfpm5svr2q...

CVE-2026-38935

creationtimestamp| type| source ---|---|--- 2026-04-27 09:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81812 2026-04-27 15:00:08+00:00| published-proof-of-concept| Telegram/SPdUhd4HVoLIToB8DVWG5b4lXjNZTDUUT7OIICRBagRYmDU 2026-07-06 11:47:34+00:00| seen|...

CVE-2026-7035

creationtimestamp| type| source ---|---|--- 2026-04-26 14:17:15+00:00| seen| https://mastodon.social/users/RedPacketSecurity/statuses/116471403743332437 2026-04-30 18:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkq7ekvz6p2u...

CVE-2026-41478

creationtimestamp| type| source ---|---|--- 2026-04-24 22:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjlqme3z2n 2026-04-28 16:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkkxq6o5ex2w 2026-04-28 16:07:10+00:00| seen|...

MAL-2026-3065 Malicious code in @m0ntana/app.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffd5d049b453ec288428ae1c5b369effbc0397e753720aeb3900a746bb83519 The package @m0ntana/app.web was found to contain malicious code. Source: ghsa-malware b7fdecb35a1116b81d1340d7d6cc748a050b4dde46beb279a40f6e049955ca...

GHSA-XHMJ-RG95-44HV

creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:31+00:00| seen| Telegram/BiTM4VWQdbYmMG43-mv447qo5-YjFbOvUme2BKAYDCNPPw...

CVE-2026-6886

creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 11:16:37+00:00| seen| Telegram/wFSQsgW7X9YvnPcwQoIwWZcAEOwcl2-nLfGCKL8FlikswBY 2026-04-23 19:44:39+00:00| seen|...

GHSA-FJ7C-2P5Q-G56M

creationtimestamp| type| source ---|---|--- 2026-04-22 23:20:48+00:00| seen| Telegram/bXcnMEVg4MqmghIUy-Ivhp7SDQD9oC-u5oUbMXpQMRT1SlU...

CVE-2026-33733

creationtimestamp| type| source ---|---|--- 2026-04-22 23:20:31+00:00| seen| Telegram/n2iRBZnq9E7ZcL0orkFwrYjYuWJ0gfdHv4rT79OW1qv3c...

GHSA-PFCQ-4GJR-6GJM

creationtimestamp| type| source ---|---|--- 2026-04-22 23:20:31+00:00| seen| Telegram/n2iRBZnq9E7ZcL0orkFwrYjYuWJ0gfdHv4rT79OW1qv3c...

CVE-2026-34063

creationtimestamp| type| source ---|---|--- 2026-04-22 20:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk4ctsttnv2h 2026-04-22 21:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4fdbxqg62g 2026-04-22 21:21:17+00:00| published-proof-of-concept|...

CVE-2026-34310

creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:48+00:00| seen| Telegram/DVTWZmGG1qCJe-0IJfQ1HXgYFTwgnUj24suPZSIXyV8Y...