CVE-2026-25054

creationtimestamp| type| source ---|---|--- 2026-02-05 08:08:06+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1...

CVE-2026-25027

creationtimestamp| type| source ---|---|--- 2026-02-05 00:32:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me35altaou2r...

CVE-2026-0659

creationtimestamp| type| source ---|---|--- 2026-02-04 17:17:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2ey6d7qz2x...

CVE-2026-24954

creationtimestamp| type| source ---|---|--- 2026-02-03 19:20:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy3f6vls42m...

CVE-2026-1432

creationtimestamp| type| source ---|---|--- 2026-02-03 13:16:27+00:00| seen| Telegram/fpMcrY2RALMfsN1onUqQsHu7uTJCJuSmLnazyi9cvEQogc...

CVE-2026-24071

creationtimestamp| type| source ---|---|--- 2026-02-02 18:18:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhgzmqxl2g...

CVE-2025-47398

creationtimestamp| type| source ---|---|--- 2026-02-02 16:18:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvaqwvlkb2x 2026-02-06 05:15:47+00:00| seen| https://notnow.dev/objects/7e03b73a-ee5a-44fc-b7e0-8cb584640a7d...

Malicious Package

Overview react-native-expofp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in eslint-config-minecraft-scripting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965724c03399dbf45fac622dbfa8cb38e94e6cf7e3c137390da6e2818b9f073b The package eslint-config-minecraft-scripting was found to contain malicious code. Source: ghsa-malware...

MAL-2026-631 Malicious code in cowsay-caps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17661a2b5a74d9c2f32dceee01043881ce230427c3121c4bdd6f43987e49765e The package cowsay-caps was found to contain malicious code...

MAL-2026-634 Malicious code in eslint-config-minecraft-scripting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965724c03399dbf45fac622dbfa8cb38e94e6cf7e3c137390da6e2818b9f073b The package eslint-config-minecraft-scripting was found to contain malicious code. Source: ghsa-malware...

GHSA-PJ9H-FMXG-JWMR vulnerabilities

Vulnerabilities for packages: chromium...

CERTFR-2026-ALE-001

creationtimestamp| type| source ---|---|--- 2026-01-30 11:02:01+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115983706971608725...

CVE-2025-39490

creationtimestamp| type| source ---|---|--- 2026-01-29 17:22:15+00:00| seen| Telegram/eR7xGnNWU7JWkc99SGTnYFcvM6hfVlfsSpY-TqDfNslGI...

CVE-2026-1237

creationtimestamp| type| source ---|---|--- 2026-01-29 15:40:51+00:00| seen| https://gist.github.com/alon710/e49bd8e494bc74785456a45ff96b4d99...

CVE-2025-67952

creationtimestamp| type| source ---|---|--- 2026-01-29 03:21:49+00:00| seen| Telegram/keSNEMnsp0L6G3NDKAlSA2LDxW6SGZxuWSh4xLVAnJ4bS9E...

CGA-V7M7-2C4G-5VFX

Bulletin has no description...

PYSEC-2026-1 A single post-release of dydx-v4-client contained obfuscated multi-stage loader

A PyPI user account compromised by an attacker and was able to upload a malicious version 1.1.5.post1 of the dydx-v4-client package. This version contains a highly obfuscated multi-stage loader that ultimately executes malicious code on the host system. While the final payload is not visible...

CVE-2025-68871

creationtimestamp| type| source ---|---|--- 2026-01-28 17:20:11+00:00| seen| Telegram/yXy36TX-l3HHyr8aIHw3JdopJLK3nb5QySa9H1H0VzeiNQU...

CVE-2025-7740

creationtimestamp| type| source ---|---|--- 2026-01-28 10:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2etilnc2c 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-09...