12773 matches found
Malicious code in @gocortexio/npmgremlinbox-agpl-1-0-only (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b2260e2800619ccb9a093618b29bba531fdca6348febc8547be7d925da7b4c No a static rule matches and no traced behavioral findings were produced for this package version. With no evidence of exfiltration, install-time...
MAL-2026-10950 Malicious code in @iphouse/core (npm)
The @iphouse/core package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...
CVE-2026-63832
creationtimestamp| type| source ---|---|--- 2026-07-19 15:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz4tvv23r2q 2026-07-19 19:52:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116948386407305637 2026-07-20 16:18:29+00:00| seen|...
CVE-2026-16225
creationtimestamp| type| source ---|---|--- 2026-07-19 12:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqys4cjrqo2b...
CVE-2026-53368
creationtimestamp| type| source ---|---|--- 2026-07-19 11:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyppf7xsd2x...
CVE-2026-16213
creationtimestamp| type| source ---|---|--- 2026-07-19 08:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqydka3b5q2i...
Malicious code in axios-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d01cf6414d6896b4f60ac6e2ecc238d33c049b6f6f5add44bd7700de32a906 The package presents itself as a drop-in replacement for axios identical name shape, README, and API but adds a top-level import of a separate npm...
CVE-2026-8505
creationtimestamp| type| source ---|---|--- 2026-07-17 20:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulivjdmi24 2026-07-17 22:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mququiyq3u2s 2026-07-18 10:30:29+00:00| seen|...
CVE-2026-38158
creationtimestamp| type| source ---|---|--- 2026-07-17 15:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqtzxeo5v72v...
CVE-2026-15395
creationtimestamp| type| source ---|---|--- 2026-07-17 12:12:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqtpwagzup2v 2026-07-17 12:12:46+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116935253395484489...
CVE-2026-41993
creationtimestamp| type| source ---|---|--- 2026-07-17 11:39:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqto3sym5k2u...
CVE-2026-62319
creationtimestamp| type| source ---|---|--- 2026-07-17 02:01:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mqsnr6vyls2w...
GHSA-48QW-824M-86PR
creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...
CVE-2025-66680
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:27+00:00| seen| Telegram/Go2mbO6T6ENYXGQQscwFrV9HUbwocawJhfgUeLLUItaC9Ko 2026-07-16 19:00:28+00:00| seen| Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0 2026-07-17 00:00:44+00:00| seen|...
CVE-2016-5183
creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:04+00:00| seen| https://t.me/KaitNews/312 2026-07-17 00:00:51+00:00| seen| https://t.me/KaitNews/312...
CVE-2026-15013
creationtimestamp| type| source ---|---|--- 2026-07-16 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116928127100536568 2026-07-16 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z 2026-07-16 06:26:05+00:00| seen|...
MAL-2026-10762 Malicious code in @edgecommons/edgecommons (npm)
The @edgecommons/edgecommons package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...
CVE-2026-52893
creationtimestamp| type| source ---|---|--- 2026-07-15 23:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w 2026-07-16 00:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i...
CVE-2026-52891
creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25 2026-07-16 00:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s 2026-07-18 04:18:04+00:00| seen|...