86726 matches found
MAL-2026-4568 Malicious code in fulcrum-sessions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3971399e0fb1bd6c61f5306557512ed22dc0605747526b600b08626a50eb31e src/config.js hardcodes a live Telegram bot token bot id 8656735452 and a default groupId -1003974755050 pointing at a chat owned by the package...
CVE-2020-7602
creationtimestamp| type| source ---|---|--- 2026-05-20 03:00:06+00:00| published-proof-of-concept| Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw 2026-05-20 09:00:05+00:00| published-proof-of-concept| Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk...
CVE-2024-10821
creationtimestamp| type| source ---|---|--- 2026-05-20 03:00:06+00:00| published-proof-of-concept| Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw 2026-05-20 09:00:05+00:00| published-proof-of-concept| Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk...
Malicious code in ethers-wallet-packages (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beda1480a40189cc8177ace4e3d6fd9773ad81f4cbe5a6c07e3004427846dc8d The package impersonates the legitimate @ethersproject/wallet source files are otherwise verbatim copies, including the internal version string...
MAL-2026-4554 Malicious code in ethers-wallet-packages (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beda1480a40189cc8177ace4e3d6fd9773ad81f4cbe5a6c07e3004427846dc8d The package impersonates the legitimate @ethersproject/wallet source files are otherwise verbatim copies, including the internal version string...
Malicious code in wallet-agent-ai-radix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a953d7785091650f4f48e0b038e71ad79788102ffd652bff4bb0e8bf40ea21 dist/agent.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org reached via fetch with a POST body that includes values from...
MAL-2026-4709 Malicious code in wallet-agent-ai-radix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a953d7785091650f4f48e0b038e71ad79788102ffd652bff4bb0e8bf40ea21 dist/agent.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org reached via fetch with a POST body that includes values from...
CVE-2026-2587
creationtimestamp| type| source ---|---|--- 2026-05-20 01:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdtv3ko2w 2026-05-20 22:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/85099 2026-05-20 23:00:11+00:00| published-proof-of-concept|...
Malicious code in morin (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c27d25a4c203cbb89156281fbacc7feb424a09eaa296f7c3dedff860891f1f morin/common.py hardcodes an HTTP proxy at 191.102.147.15:8000 with embedded credentials proxies = 'https': 'http://5TUMV6:[email protected]:8000...
MAL-2026-4757 Malicious code in morin (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c27d25a4c203cbb89156281fbacc7feb424a09eaa296f7c3dedff860891f1f morin/common.py hardcodes an HTTP proxy at 191.102.147.15:8000 with embedded credentials proxies = 'https': 'http://5TUMV6:[email protected]:8000...
Malicious code in claude-all-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c5a1f5a6f5bd2dadc4e207ff4e8e310c24cd4c99c751ed094251e00e0af8f3 On install, postinstall.js writes configuration into /.claude/, /.gemini/, /.codex/, and /.kiro/ that hard-wires AI tooling to author-controlled...
MAL-2026-4522 Malicious code in claude-all-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c5a1f5a6f5bd2dadc4e207ff4e8e310c24cd4c99c751ed094251e00e0af8f3 On install, postinstall.js writes configuration into /.claude/, /.gemini/, /.codex/, and /.kiro/ that hard-wires AI tooling to author-controlled...
Malicious code in cheaty-sync-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b192c71c59ccca1d9cc720372bd29f39eae8b5da4d572cd1e8312d6b57d6b4 cheaty-sync-bot ships a clipboard-sync CLI that hardcodes a single Telegram bot token index.js:10 owned by the package author. There is no...
MAL-2026-4518 Malicious code in cheaty-sync-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b192c71c59ccca1d9cc720372bd29f39eae8b5da4d572cd1e8312d6b57d6b4 cheaty-sync-bot ships a clipboard-sync CLI that hardcodes a single Telegram bot token index.js:10 owned by the package author. There is no...
CVE-2026-30691
creationtimestamp| type| source ---|---|--- 2026-05-19 15:00:05+00:00| seen| https://t.me/GithubRedTeam/84834 2026-05-19 21:00:04+00:00| published-proof-of-concept| Telegram/SM41ZgDjE5GCx8K5BndOjKQZfdnq7khstyXQtIQ9aWd83s...
GHSA-8JQP-QV73-395R
creationtimestamp| type| source ---|---|--- 2026-05-19 12:39:14+00:00| seen| Telegram/SPO6iT-d8-bIQWZXI60t6OwvPUIqsHGwkcNiX5JYtOrng...
CVE-2026-5203
creationtimestamp| type| source ---|---|--- 2026-05-19 03:00:11+00:00| published-proof-of-concept| Telegram/-GtOjHLopjI3IaPVfvZorB58d5FmtAfesT4Onu4QlAoHy4...
CVE-2026-36438
creationtimestamp| type| source ---|---|--- 2026-05-18 01:00:04+00:00| seen| https://t.me/GithubRedTeam/84611 2026-05-18 09:00:04+00:00| published-proof-of-concept| Telegram/x3hQR0-UI2JUxQyjcWHc5kHBpfVh3Jms4Hr2XANxyksqy3E...