CVE-2026-8380

creationtimestamp| type| source ---|---|--- 2026-05-28 15:00:16+00:00| seen| Telegram/vo-VgstXQuzhPYqY8B85GwxskfRMHrGkVpymMR7KirmWNUQ 2026-05-28 21:00:04+00:00| seen| Telegram/gT5VG53EHkYx7lJsNMzVATNBd8Pb7In7gs06zL9W87J77Dc 2026-06-26 07:30:28+00:00| seen|...

CVE-2021-22291

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-03 2026-05-28 20:05:50+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mmwt2n7ejt2e...

GHSA-5X7J-XJPX-PMM5

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:41+00:00| seen| https://t.me/GithubRedTeam/86181...

CVE-2025-50946

creationtimestamp| type| source ---|---|--- 2026-05-27 21:00:05+00:00| seen| Telegram/PMwLWJ8bCumUt1njp0TjasQmSGobRcnITTCtVX5oyv1QKE...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the apiHandler and webHandlerTelegramBot processes. An attacker can cause the application to exhaust system memory and crash by sending an extremely large or endless JSON payload over a single TCP connection...

CVE-2026-46275

creationtimestamp| type| source ---|---|--- 2026-05-26 16:00:05+00:00| seen| https://t.me/GithubRedTeam/86003 2026-05-27 21:11:38+00:00| seen| Telegram/gErohbwTCKTWlpvhKyjoMZM9ytnNcaUIrq9IFwI-Mxv4 2026-06-08 15:56:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116715303471454670...

Malicious code in amaco-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6204f29c39ab7a22921331bf33f2501b27fba9aac6a8b87b833caef9c5f506 dist/index.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org referenced from a fetch/POST call alongside process.env access...

MAL-2026-4816 Malicious code in amaco-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6204f29c39ab7a22921331bf33f2501b27fba9aac6a8b87b833caef9c5f506 dist/index.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org referenced from a fetch/POST call alongside process.env access...

CVE-2026-34908

creationtimestamp| type| source ---|---|--- 2026-05-26 09:13:20+00:00| seen| https://ccb.belgium.be/advisories/warning-ubiquiti-has-addressed-multiple-critical-vulnerabilities-unifi-os-patch 2026-05-26 16:30:06+00:00| seen| https://t.me/truesecator/8245 2026-05-27 06:38:42+00:00| seen|...

CVE-2026-27384

creationtimestamp| type| source ---|---|--- 2026-05-26 09:00:05+00:00| seen| https://t.me/GithubRedTeam/85938 2026-05-27 21:10:45+00:00| seen| Telegram/GF77XqZ1LHaWDL2kD1JemKeP32DvhHpTDQqckw5Eq33XXvc...

CVE-2025-8754

creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-03...

CVE-2026-46670

creationtimestamp| type| source ---|---|--- 2026-05-25 23:11:12+00:00| seen| https://t.me/realcodeb0ss/440 2026-05-26 02:13:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46670.yaml...

Malicious code in etherproxy-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5756836b470f645f316696cbaedb1aedc21cde7fc921714bfbf70f2d528ad5b4 The bundled dist/index.js reads process.env values and posts data to https://api.telegram.org via a hardcoded fetch call line 97, with additional...

MAL-2026-4552 Malicious code in etherproxy-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5756836b470f645f316696cbaedb1aedc21cde7fc921714bfbf70f2d528ad5b4 The bundled dist/index.js reads process.env values and posts data to https://api.telegram.org via a hardcoded fetch call line 97, with additional...

CVE-2026-9389

creationtimestamp| type| source ---|---|--- 2026-05-25 14:45:36+00:00| seen| https://t.me/bdufstecru/3193...

CVE-2026-47102

creationtimestamp| type| source ---|---|--- 2026-05-25 14:00:04+00:00| seen| https://t.me/GithubRedTeam/85833 2026-05-25 15:00:12+00:00| seen| Telegram/X1SzwuqpRNev2GcuASsATzQD-1aeqEPKRVacdyAUElWlBI 2026-05-25 21:00:04+00:00| seen| Telegram/DE8V0W55Lks0xFUNDp9UGyNB0T-CRSwfpeIrdYc5V2Tnj4 2026-06-1...

Malicious code in atel-mcp-openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...

MAL-2026-4485 Malicious code in atel-mcp-openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...

CVE-2026-38426

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

CVE-2026-38427

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...