Malicious code in chai-as-type (npm)

chai-as-type is a malicious npm package that when imported downloads a C2 dropper from https://api.npoint.io/c26313f0733957a7d787 and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

Malicious code in snitz-chief-cloud-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a91d88d68aae1e6311a7d533b3efc0618206a56025c6a96c1f1024b3ccf9df The package snitz-chief-cloud-config was found to contain malicious code. Source: ghsa-malware...

CVE-2026-35033

creationtimestamp| type| source ---|---|--- 2026-04-15 00:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjio2djnt62g 2026-04-15 01:19:29+00:00| seen| Telegram/4QaIVP4Z6j7I04jn6w3qCKrQ76Fz4EXtpUCBPkRfgX1dqr4...

CVE-2025-54502

creationtimestamp| type| source ---|---|--- 2026-04-14 17:15:15+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116404185501428756 2026-04-16 02:12:12+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mjldi4z6ck26 2026-04-16 21:19:58+00:00| published-proof-of-concept|...

CVE-2026-3017

creationtimestamp| type| source ---|---|--- 2026-04-14 07:15:21+00:00| seen| Telegram/NXufrru2fjTHVXSL0tapEE23vkkHYcwxHVNwd0hzRnaRHhc 2026-04-14 07:23:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjgtxcj5tw2y 2026-04-14 08:03:08+00:00| seen|...

GHSA-G985-WJH9-QXXC

creationtimestamp| type| source ---|---|--- 2026-04-14 05:17:42+00:00| seen| Telegram/EXit4BCARRaTXD4SBLqO-yd3UPNB5jBijYowsPR2aTE5HY...

CVE-2026-22565

creationtimestamp| type| source ---|---|--- 2026-04-14 01:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjga3ex3we2m 2026-04-14 23:21:40+00:00| published-proof-of-concept| Telegram/vFalP9cCg-kFoPrSdHM4ZH4qnLHRdngXJCuq8FbW2RkF4k...

CVE-2026-30806

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:43+00:00| seen| Telegram/mgx4OESgILIX0WlIlJJnUrKrutJBiy7rqG6NL0bWgANWmeU...

Malicious code in pubnub-element (npm)

Malicious scripts exfiltrate sensitive info username, path, hostname to a remote webhook via wget in test, preinstall & preupdate. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1f86ef3c85074c2ca23cfd60296a4875f6bc610547f691543cef5f38e1788a The package...

CVE-2026-6153

creationtimestamp| type| source ---|---|--- 2026-04-13 05:17:45+00:00| seen| Telegram/L25kjrz6XeZaxAo3WRm2MY3CbrP1em2RAACUofFfE68hpIg...

CVE-2026-6148

creationtimestamp| type| source ---|---|--- 2026-04-13 03:16:54+00:00| published-proof-of-concept| Telegram/KiQO6BzL2B4UMdSmpPVmdPz1IvqmoqW4UFsejAlxhN67Qrk 2026-04-13 05:34:48+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mje5foj4i22r...

Malicious code in upstartapplicationstatus (npm)

Package is malware. Collects and exfiltrates sensitive info SSH keys, credentials, env vars via insecure HTTPS/HTTP after install. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e154270d6b3540f095f5fc77ab1167448e967009cbb719f6fc087c32fadce15f The package...

CVE-2025-54315

creationtimestamp| type| source ---|---|--- 2026-04-11 10:56:07+00:00| seen| https://gist.github.com/err931/476fd95360632071c9ba27a7d01593bd 2026-04-11 10:58:36+00:00| seen| https://gist.github.com/err931/485dd1471d055e2bc5ef62a0750de0fc...

GHSA-JX2W-VP7F-456Q

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw...

CVE-2026-35650

creationtimestamp| type| source ---|---|--- 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-11 08:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7hwnfhkt2e 2026-06-17 04:07:07+00:00| seen|...

CVE-2026-31048

creationtimestamp| type| source ---|---|--- 2026-04-10 17:00:04+00:00| seen| https://t.me/GithubRedTeam/79768 2026-04-10 21:00:05+00:00| published-proof-of-concept| Telegram/JqVwQ-JC9B9ph46qqgs1KPvHPPLX-sQPp9do9RGc2keWM...

CVE-2026-40287

creationtimestamp| type| source ---|---|--- 2026-04-10 12:20:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g985-wjh9-qxxc 2026-04-14 05:17:42+00:00| seen| Telegram/EXit4BCARRaTXD4SBLqO-yd3UPNB5jBijYowsPR2aTE5HY 2026-04-14 05:20:27+00:00|...

CVE-2026-22750

creationtimestamp| type| source ---|---|--- 2026-04-10 09:17:39+00:00| published-proof-of-concept| Telegram/6sW88BjwOE3AHA0v9w1zrWgG5EAJrhgxrYoPay5W7gN4tNI 2026-04-10 10:07:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj53au3zyx2z 2026-04-10 10:08:36+00:00| seen|...

CVE-2026-40154

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:50+00:00| seen| Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM 2026-04-10 00:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj43o5tlum25 2026-04-10 06:11:33+00:00| seen|...

CVE-2026-33756

creationtimestamp| type| source ---|---|--- 2026-04-08 23:32:54+00:00| published-proof-of-concept| Telegram/nyeqn3leA21ahM9eDPOdcOfg88eaiSN6Cc1j2Af2p1JdwTU 2026-04-09 09:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2h25tabw2p...