MAL-2026-14158 Malicious code in deepface-weight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethonmarketuserbot.session for...

Malicious code in deepface-weights (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558 On import, deepfaceweights starts a daemon thread that polls every 10 seconds for the file data/telethonmarketuserbot.session in the current working...

MAL-2026-14132 Malicious code in deepface-weights (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558 On import, deepfaceweights starts a daemon thread that polls every 10 seconds for the file data/telethonmarketuserbot.session in the current working...

Malicious code in infogram-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245 [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.checkoutputcmd,...

MAL-2026-14131 Malicious code in infogram-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245 [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.checkoutputcmd,...

Malicious code in httpz-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004770b4da0c6705f95ef2c8654fd81d37650ffacaad7160041bded02cdb7fbc httpz-requests exposes a Telegram bot startbot, runcmdenc, httprequest whose message handler executes arbitrary shell commands on the host running th...

MAL-2026-14130 Malicious code in httpz-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004770b4da0c6705f95ef2c8654fd81d37650ffacaad7160041bded02cdb7fbc httpz-requests exposes a Telegram bot startbot, runcmdenc, httprequest whose message handler executes arbitrary shell commands on the host running th...

CVE-2024-40275

creationtimestamp| type| source ---|---|--- 2026-08-18 12:00:03+00:00| published-proof-of-concept| Telegram/mmWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU 2026-08-19 00:00:26+00:00| published-proof-of-concept| Telegram/mmWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU...

CVE-2026-19650

creationtimestamp| type| source ---|---|--- 2026-08-18 04:00:03+00:00| published-proof-of-concept| Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktHwo 2026-08-18 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117115691222589671 2026-08-18 12:15:24+00:00| seen|...

CVE-2026-71518

creationtimestamp| type| source ---|---|--- 2026-08-18 01:00:04+00:00| published-proof-of-concept| Telegram/GwuC3cy-OzU2KFCuHYMrTkUTBOKWE1Dd5EfEUwy3SR6M 2026-08-18 04:00:03+00:00| published-proof-of-concept| Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktHwo 2026-08-19 00:00:27+00:00|...

CVE-2026-51031

creationtimestamp| type| source ---|---|--- 2026-08-17 18:00:06+00:00| seen| Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2JsYTarvuZL8 2026-08-18 00:00:10+00:00| published-proof-of-concept| Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2JsYTarvuZL8...

GHSA-66H4-QJ4X-38XP

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:07+00:00| seen| https://t.me/CyberSecurityExploit/29329 2026-08-16 00:00:23+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/29329...

CVE-2026-28711

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:04+00:00| seen| https://t.me/CyberSecurityExploit/30370 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30370...

CVE-2026-30121

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:04+00:00| seen| https://t.me/CyberSecurityExploit/30370 2026-08-16 00:00:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30370...

CVE-2026-32677

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30461 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30461...

CVE-2026-34419

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30461 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30461...

CVE-2026-29598

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30555 2026-08-16 00:00:37+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30555...

CVE-2026-30977

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:02+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30458 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30458...

MAL-2026-13955 Malicious code in mutex-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e6d6c8a6e7f9463fa8a07604b4699b1dba8415ee6759e3145b0cab183f4421 The package presents itself as a mutex/semaphore library but contains a hidden second-stage loader in lib/Mutex.js. When runExclusive is invoked with...

Malicious code in mutex-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e6d6c8a6e7f9463fa8a07604b4699b1dba8415ee6759e3145b0cab183f4421 The package presents itself as a mutex/semaphore library but contains a hidden second-stage loader in lib/Mutex.js. When runExclusive is invoked with...