Malicious code in common-tg-service (npm)

Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 502 published versions 1.0.1 through 1.3.207 are malicious. Pairs with ams-ssk, which provides the operator's server-side AMS/CMS infrastructure...

Malicious code in ams-ssk (npm)

Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 31 published versions 1.0.0 through 1.0.33 are malicious. Pairs with common-tg-service, which performs the client-side Telegram account takeover. ams-ssk is the...

MAL-2026-3287 Malicious code in ams-ssk (npm)

Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 31 published versions 1.0.0 through 1.0.33 are malicious. Pairs with common-tg-service, which performs the client-side Telegram account takeover. ams-ssk is the...

MAL-2026-3288 Malicious code in common-tg-service (npm)

Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 502 published versions 1.0.1 through 1.3.207 are malicious. Pairs with ams-ssk, which provides the operator's server-side AMS/CMS infrastructure...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 – cPanel/WHM Auth Bypass + Root Password Changer...

Malicious code in pycryptcore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3337f9433143a04e30ce5881c7786f787cc882c983ed5e68b22f60fd79f2a0dd Typosquatting package that automatically exfiltrates files to a Telegram channel on importing. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2026-3211 Malicious code in pycryptcore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3337f9433143a04e30ce5881c7786f787cc882c983ed5e68b22f60fd79f2a0dd Typosquatting package that automatically exfiltrates files to a Telegram channel on importing. --- Category: MALICIOUS - The campaign has clearly malicious...

CVE-2025-69606

creationtimestamp| type| source ---|---|--- 2026-04-30 23:00:10+00:00| seen| Telegram/P45NJHmymloXtZIQDhqedqgrJijkJmCthR1UJzeSteIHM...

CVE-2026-42281

creationtimestamp| type| source ---|---|--- 2026-04-30 21:00:54+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-ph6f-2cvq-79hq 2026-05-01 03:00:05+00:00| seen| Telegram/Bh4iyBQIMN2Hl9Jl9GcGtuPw1PskodE0qn4w68HKrpiOc 2026-05-11 16:50:45+00:0...

CVE-2026-42141

creationtimestamp| type| source ---|---|--- 2026-04-30 07:00:11+00:00| seen| Telegram/P5bUU6aFVi3TImC6WDx24HeHf8RVUggO7fw0-2Q4WCtYm0 2026-04-30 07:02:37+00:00| seen| https://t.me/GithubRedTeam/82154 2026-04-30 09:00:04+00:00| seen| Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLczNxtZwAY...

PT-2026-36101

Name of the Vulnerable Software and Affected Versions nanobot affected versions not specified Description An issue exists where including the | character in a sender address allows an attacker to bypass the Channel allowlist. This bypass provides full access to the Agent Loop, exposing all tools,...

CVE-2023-27321

creationtimestamp| type| source ---|---|--- 2026-04-29 15:00:06+00:00| seen| Telegram/n7wRicylc66WfbR0mdLwehKvlM-QwtHoFxwz1W2HjLMRaPw...

CVE-2026-7222

creationtimestamp| type| source ---|---|--- 2026-04-29 11:00:04+00:00| seen| https://t.me/GithubRedTeam/82052...

CVE-2026-38945

creationtimestamp| type| source ---|---|--- 2026-04-29 09:00:04+00:00| seen| https://t.me/GithubRedTeam/82037...

CVE-2026-41462

creationtimestamp| type| source ---|---|--- 2026-04-29 03:00:06+00:00| seen| Telegram/DejYBhAAqmnzlDgPgKJnfj-csYLXEQTMeHlFlO7t5L8Y-g8...

CVE-2025-56537

creationtimestamp| type| source ---|---|--- 2026-04-28 19:00:11+00:00| seen| Telegram/xKGSa9DIZz92ec3NOe9-ltnh782Q7CqXV4Vbusfx7aEeqhw...

CVE-2025-56536

creationtimestamp| type| source ---|---|--- 2026-04-28 19:00:11+00:00| seen| Telegram/xKGSa9DIZz92ec3NOe9-ltnh782Q7CqXV4Vbusfx7aEeqhw...

CVE-2025-58674

creationtimestamp| type| source ---|---|--- 2026-04-27 20:30:12+00:00| seen| https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9...

CVE-2026-38936

creationtimestamp| type| source ---|---|--- 2026-04-27 09:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81812 2026-04-27 15:00:08+00:00| published-proof-of-concept| Telegram/SPdUhd4HVoLIToB8DVWG5b4lXjNZTDUUT7OIICRBagRYmDU 2026-07-05 18:17:18+00:00| seen|...

CVE-2026-38935

creationtimestamp| type| source ---|---|--- 2026-04-27 09:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81812 2026-04-27 15:00:08+00:00| published-proof-of-concept| Telegram/SPdUhd4HVoLIToB8DVWG5b4lXjNZTDUUT7OIICRBagRYmDU 2026-07-06 11:47:34+00:00| seen|...