GHSA-2Q6R-344G-CX46

creationtimestamp| type| source ---|---|--- 2025-05-21 15:03:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114546430468372798...

MAL-2025-4074 Malicious code in csat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6108820bc94bf57a91a424d61c4704c69a86f807ea9f4993a63255a993ee8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4081 Malicious code in ggeiekkepbwedvcmerki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856bfd7871613286d5d690f7b4c1159ac3e40956702f7e17b4ab760454a0793d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12680

creationtimestamp| type| source ---|---|--- 2025-05-20 19:43:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17067...

CVE-2024-11190

creationtimestamp| type| source ---|---|--- 2025-05-20 19:42:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17049 2026-05-26 09:08:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmqnfyvpxm2c...

MAL-2025-5096 Malicious code in aliyun-ai-labs-snippets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 459b9313aa2d453392e97f619a0ffb2898c3b90700e72dcb2cde4d1a1b97b1ac During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as wel...

CERTFR-2025-ACT-021

creationtimestamp| type| source ---|---|--- 2025-05-19 12:23:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lpjkt4sinn2g 2025-05-19 12:23:15+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114534474947199584 2025-05-19 13:48:07+00:00| seen|...

MAL-2025-4019 Malicious code in sc5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b880667ce4732bdd0213169131ac05b078a08cd64c08138828191988f9a0979b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4897

creationtimestamp| type| source ---|---|--- 2025-05-18 21:37:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16778 2025-05-18 22:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpi4ylfult2p...

CVE-2025-4887

creationtimestamp| type| source ---|---|--- 2025-05-18 16:54:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphjhcduxvo2 2025-05-18 19:04:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16772 2025-05-18...

CVE-2025-4790

creationtimestamp| type| source ---|---|--- 2025-05-16 17:34:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16720...

GHSA-QM2F-959G-7P65

creationtimestamp| type| source ---|---|--- 2025-05-16 14:39:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16690 2025-05-16 15:17:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518172966589726...

CVE-2024-49928

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16656 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-49929

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16655 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-1531

creationtimestamp| type| source ---|---|--- 2025-05-16 06:34:15+00:00| seen| https://bsky.app/profile/potato.software/post/3lpbfwd2nd224 2025-05-16 06:35:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16634 2025-05-16 09:03:09+00:00| seen|...

GHSA-2F4R-34M4-3W8Q

creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674...

CVE-2024-6711

creationtimestamp| type| source ---|---|--- 2025-05-15 20:33:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16556...

GHSA-CXRH-J4JR-QWG3

creationtimestamp| type| source ---|---|--- 2025-05-15 17:34:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16542...

MAL-2025-3858 Malicious code in unipig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd7ac3cdec95558ed3e5a4e37325f492860d532de1cb8c3013e53a21ee441ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-guardian-management-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489a903f859c5e165cf70220daabaaad24a21cdb1705bd94dfddab893954e72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...