MAL-2026-760 Malicious code in @helloflex/widget-next-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca9fce3cc7390ed9fa54426eb0404651c2679a146b83aaf537d0d4c4cf9ba2c The package @helloflex/widget-next-sdk was found to contain malicious code. Source: ghsa-malware...

CVE-2026-25056

creationtimestamp| type| source ---|---|--- 2026-02-05 08:08:06+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1 2026-02-05 22:51:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5i3rbi3w2v 2026-03-03 12:53:52+00:00| seen|...

CVE-2026-25115

creationtimestamp| type| source ---|---|--- 2026-02-04 20:10:05+00:00| seen| https://gist.github.com/alon710/7d9a8b07c2ceec48a9fcaf0715b3bbd6 2026-02-05 08:08:06+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1 2026-02-05 22:51:39+00:00| seen|...

CVE-2025-15368

creationtimestamp| type| source ---|---|--- 2026-02-04 14:24:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me23bsagt72m...

Exposed AWS Credentials Lead to AI-Assisted Cloud Breach in 8 Minutes

Researchers recently tracked a high-speed cloud attack where an intruder gained full admin access in just eight minutes. Discover how AI automation and a simple storage error led to a major security breach...

CVE-2026-20987

creationtimestamp| type| source ---|---|--- 2026-02-04 09:16:53+00:00| seen| Telegram/XdHYZh0J7WcTlVKxiglshK6ayFniZdPMWChJvlhd1IMv6c 2026-02-04 09:17:03+00:00| seen| Telegram/AJJNsvmkwmZ-BaEozEan6esCkIRlwWrgPq4ibjXsKQ5cofg...

CVE-2026-1207

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-05 11:14:02+00:00| confirmed|...

CVE-2026-1632

creationtimestamp| type| source ---|---|--- 2026-02-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-03 2026-02-03 23:25:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyj2ocynj2g...

Malicious code in frontend-js-state-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770e7ef9c670e6c188650363a084728f7827f49ab63d6fb9aa57f6e4cfd07dbf The package frontend-js-state-web was found to contain malicious code. Source: ghsa-malware...

MAL-2026-671 Malicious code in cheerio-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8345a6f4f7a1b718b4a830c532eb9dd1ad2d6dfcc7025f61dc440db597b39db0 The package cheerio-core was found to contain malicious code. Source: ghsa-malware bc9d76c466fb57f9a35285e94c0e9819bf5fc9e6a61d44e97e14ef0c2c4b96d0 A...

CERTFR-2026-ACT-005

creationtimestamp| type| source ---|---|--- 2026-02-02 14:24:55+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mdv2f55uwk26 2026-02-02 15:42:59+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mdv6qqjhxb2m 2026-02-06 23:48:20+00:00| seen|...

CVE-2026-23795

creationtimestamp| type| source ---|---|--- 2026-02-02 13:04:20+00:00| seen| https://seclists.org/oss-sec/2026/q1/139 2026-02-02 15:09:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdv4vpjtvm2s...

Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users

The maintainer of Notepad++ has revealed that state-sponsored attackers hijacked the utility's update mechanism to redirect update traffic to malicious servers instead. "The attack involved an infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic...

GHSA-7J88-353P-36RG

creationtimestamp| type| source ---|---|--- 2026-02-01 12:00:24+00:00| seen| https://gist.github.com/Tomer-PL/e8c69d23e16d16ee5c53a609f0f0f5c3...

CVE-2025-36070

creationtimestamp| type| source ---|---|--- 2026-01-31 14:40:51+00:00| seen| https://gist.github.com/alon710/3cd23cebef7257f32a75f9f6feb76b89 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-4454

creationtimestamp| type| source ---|---|--- 2026-01-29 16:15:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mdl6omhgqv2j...

CVE-2020-36971

creationtimestamp| type| source ---|---|--- 2026-01-28 18:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiuywoxhu2m...

Malicious code in transform-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e223730f37f6e4ebbb935ce737076e8e48e23db4fb9f8d280cc9f93a6cf2193 The package transform-vue-jsx was found to contain malicious code. Source: ghsa-malware...

CVE-2026-24883

creationtimestamp| type| source ---|---|--- 2026-01-27 19:21:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/127 2026-01-27 21:09:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgo7png6n2h 2026-01-28 02:01:17+00:00| seen|...

MAL-2026-528 Malicious code in @shije/new-qs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c217f00985a52bf4f5fbfa5dc34780dec977ad068e3d7f410e3ffa43a1df1e7d The package @shije/new-qs was found to contain malicious code. Source: ghsa-malware 78d2627d513a4310f6f6edc23265e8b98bd4d9f33fca8ff85b0380275e54bfd9...