CVE-2025-65717

creationtimestamp| type| source ---|---|--- 2026-02-17 16:12:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xg5zo5z2d 2026-02-18 13:43:09+00:00| seen| https://infosec.exchange/users/jbhall56/statuses/116091924551416854 2026-02-18 13:43:25+00:00| seen|...

CVE-2026-26220

creationtimestamp| type| source ---|---|--- 2026-02-17 07:10:47+00:00| seen| https://gist.github.com/alon710/21a935dc4b5fdb17135ead3e688c1ee1 2026-02-17 08:30:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116085033410436638 2026-02-17 08:30:40+00:00| seen|...

Malicious Package

Overview ambar-src is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-2457

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2025-20262

creationtimestamp| type| source ---|---|--- 2026-02-11 17:40:08+00:00| seen| https://gist.github.com/alon710/cd67391569e505b6f90bc55b747ff8d9...

CVE-2026-21525

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:53:06+00:00| seen|...

Malicious Package

Overview @snazah/davey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-24681

creationtimestamp| type| source ---|---|--- 2026-02-10 15:42:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejcgheawr2v...

CVE-2025-6967

creationtimestamp| type| source ---|---|--- 2026-02-10 14:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mej5qq7ylq22 2026-02-10 14:18:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mej5qzmxgb2o 2026-02-10 14:18:56+00:00| seen|...

CVE-2026-25154

creationtimestamp| type| source ---|---|--- 2026-02-10 06:25:20+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3meidcwyxe724 2026-02-10 12:17:19+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3meiwycwklm2u...

CVE-2026-25925

creationtimestamp| type| source ---|---|--- 2026-02-09 22:16:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehhzklndr23...

CVE-2026-25496

creationtimestamp| type| source ---|---|--- 2026-02-09 18:03:15+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-9f5h-mmq6-2x78 2026-02-09 23:10:05+00:00| seen| https://gist.github.com/alon710/f17e6e93e24b62efe6529ae7f171eec3...

SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

Microsoft has revealed that it observed a multi‑stage intrusion that involved the threat actors exploiting internet‑exposed SolarWinds Web Help Desk WHD instances to obtain initial access and move laterally across the organization's network to other high-value assets. That said, the Microsoft...

CERTFR-2026-ACT-006

creationtimestamp| type| source ---|---|--- 2026-02-09 14:11:32+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3megmvo2ddj22 2026-02-09 14:11:36+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116041075350640073 2026-02-09 15:34:27+00:00| seen|...

CVE-2026-2234

creationtimestamp| type| source ---|---|--- 2026-02-09 06:59:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html 2026-02-09 08:23:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefzhtaqaj2v 2026-02-09 08:24:13+00:00| seen|...

CVE-2024-3231

creationtimestamp| type| source ---|---|--- 2026-02-08 10:45:23+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-3231.yaml 2026-02-11 21:03:07+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3memet7yse324...

CVE-2026-25592

creationtimestamp| type| source ---|---|--- 2026-02-06 21:21:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tkaj2tn2r 2026-02-07 15:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116030060248069413 2026-02-07 15:30:16+00:00| seen|...

Malicious Package

Overview @opposhop/nuxt-ssr-cache is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-778 Malicious code in ac-dom-nodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b323cec1a59645d9dcb2c0951a0f7d31b362ac58e4f930306a940ed67037b20d The package ac-dom-nodes was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-784 Malicious code in monkey-tags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92f2c8690bbb505437734e0b5ffe74a1c8a9411dde8716bd9440600db0a0f1d The package monkey-tags was found to contain malicious code. Source: ghsa-malware 18cc7d0ec7d65006d2618f716b268a58021234dc7bcad189f062848160afd16f An...