GHSA-VC46-VW85-3WVM

creationtimestamp| type| source ---|---|--- 2026-04-14 05:17:42+00:00| seen| Telegram/EXit4BCARRaTXD4SBLqO-yd3UPNB5jBijYowsPR2aTE5HY...

MAL-2026-2118 Malicious code in hash-utils-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4177b7c46ecbfa35116b35a2a491107d0514cd6551a447b7213ef6e097172939 During importing the module, the code attempts to exfiltrate sensitive Telegram's client session files. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in hashtools32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689514b83cd6496b0a4213d26325e73cd2c4f0e19128b969d19797bcdd4b131d During import, the package attempts to exfiltrate sensitive Telegram session files --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2026-1080 Malicious code in hashtools32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689514b83cd6496b0a4213d26325e73cd2c4f0e19128b969d19797bcdd4b131d During import, the package attempts to exfiltrate sensitive Telegram session files --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in smtmlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e871336d0effe99cb62efeda3a287186e75c1bd4ca5770efd81718db8ababe4e Malicious copy of a standard library module that during class initialization downloads and executes remote code and after that attempts to cover its tracks by...

CVE-2025-10222

creationtimestamp| type| source ---|---|--- 2025-10-08 12:09:36+00:00| seen| Telegram/XF-4RgrKKfVldXNJULEUgMw60CodFE4RqOqC6guHTsufE...

CVE-2025-4663

creationtimestamp| type| source ---|---|--- 2025-07-08 18:16:34+00:00| seen| Telegram/xvJ0nm8kAySasnE4IS1nozIJK8-iqMVzd1BRmLAGEDQ-yU...

CVE-2024-2938

creationtimestamp| type| source ---|---|--- 2025-02-20 23:26:56+00:00| seen| Telegram/2shBV1KxAbgFNuLla09vy-7QSsd0tuslK717i9uBrscYJJdR...

CVE-2024-44057

creationtimestamp| type| source ---|---|--- 2024-09-15 11:45:32+00:00| seen| https://t.me/cvedetector/5692...

MAL-2024-9264 Malicious code in crustyhttp (PyPI)

Base64-encoded commands are executed from init.py, which exfiltrate Telegram session data. --- -= Per source details. Do not edit below this line.=- Source: kam193 806b071147126057a7de9b570f85f694ad06923e4d580ddd5274731b5343f556 In the invokehttp, the init.py contains obfuscated code attempting t...

CVE-2024-7110

creationtimestamp| type| source ---|---|--- 2024-08-22 19:23:00+00:00| seen| https://t.me/cvedetector/3924...

CVE-2024-39012

creationtimestamp| type| source ---|---|--- 2024-07-30 23:16:23+00:00| seen| https://t.me/cvedetector/2068...

CVE-2024-33519

creationtimestamp| type| source ---|---|--- 2024-07-24 23:20:36+00:00| seen| https://t.me/cvedetector/1599...

CVE-2019-19580

creationtimestamp| type| source ---|---|--- 2024-03-10 14:11:53+00:00| seen| https://t.me/ctinow/204258...

CVE-2023-27308

creationtimestamp| type| source ---|---|--- 2024-03-06 11:12:00+00:00| seen| https://t.me/ctinow/201205...

CVE-2024-27561

creationtimestamp| type| source ---|---|--- 2024-03-05 18:27:05+00:00| seen| https://t.me/ctinow/200545 2024-03-05 18:27:12+00:00| seen| https://t.me/ctinow/200551...

CVE-2023-50275

creationtimestamp| type| source ---|---|--- 2024-01-23 18:26:34+00:00| seen| https://t.me/ctinow/172207...

CVE-2023-3178

creationtimestamp| type| source ---|---|--- 2024-01-16 17:27:18+00:00| seen| https://t.me/ctinow/168909 2024-01-22 23:16:38+00:00| seen| https://t.me/ctinow/171516 2024-02-06 10:41:44+00:00| seen| https://t.me/ctinow/179886...

CVE-2023-29183

creationtimestamp| type| source ---|---|--- 2023-09-13 16:23:49+00:00| seen| https://t.me/cibsecurity/70382...

CVE-2023-37793

creationtimestamp| type| source ---|---|--- 2023-07-15 02:22:42+00:00| seen| https://t.me/cibsecurity/66764...