MAL-2026-16326 Malicious code in byted-commerce-materials (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f777e32b4a6cbb7f91f7fcac050a02a73e356df1c87e7dcd985ea9172a3993da package.json declares both preinstall and postinstall running node callback.js, so the payload fires automatically on npm install. callback.js collec...

CVE-2026-94488: Improper Neutralization of Input During Web Page Generation

Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. The first fixed stable version is 7.0.1. This occurs in button.text.toUtf8 in exportoutputhtml.cpp. Exploitation cannot occur unless HTML export was used by a victim. However, the exploit payload can be exported if a message were...

PT-2026-96192

Name of the Vulnerable Software and Affected Versions Telegram Desktop versions prior to 7.0.1 Description Cross-site scripting XSS is possible within the HTML exporter. This issue occurs in the button.text.toUtf8 function located in export output html.cpp. Exploitation requires the victim to use...

CVE-2016-10204

creationtimestamp| type| source ---|---|--- 2026-09-20 22:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102910 2026-09-21 00:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102910 2026-09-22 07:00:05+00:00| seen|...

Malicious code in @siriusbeyond/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed929a2d8cbd15860eaafb9eb773ad02f9b31f361514b47987eca8dfa1ae695 Package @siriusbeyond/[email protected] registers both preinstall and postinstall lifecycle scripts that execute callback.js on every npm install...

MAL-2026-16345 Malicious code in starbucks-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42de3e225b6f8d6be04fbf613ae4d17458626c92f2cfe1bf1b4476fe132e761 The package's package.json declares a preinstall script that runs callback.js on npm install. callback.js collects os.hostname, os.userInfo,...

CVE-2026-75863

creationtimestamp| type| source ---|---|--- 2026-09-19 18:00:04+00:00| published-proof-of-concept| Telegram/4he6Q-7YfGmpgRRUhxEQm-N1-KtSWKTxYEshkl6Xmi0RZck 2026-09-20 00:00:07+00:00| published-proof-of-concept| Telegram/4he6Q-7YfGmpgRRUhxEQm-N1-KtSWKTxYEshkl6Xmi0RZck 2026-09-25 09:17:25+00:00|...

CVE-2026-75157

creationtimestamp| type| source ---|---|--- 2026-09-19 14:00:05+00:00| seen| https://t.me/GithubRedTeam/102754 2026-09-20 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102754 2026-09-22 07:00:10+00:00| seen| Telegram/iGFXEv4gfpyl7BqTNjPDtEQ8FnW4XXXDcMjUEMDNy6ylNI 2026-09-...

CVE-2026-34492

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1436 2026-09-20 00:00:10+00:00| seen| https://t.me/icscert/1436...

CVE-2026-64887

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1436 2026-09-20 00:00:07+00:00| seen| https://t.me/icscert/1436...

CVE-2026-81988

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| Telegram/FtCIultLb3jdqKkaMJKZnmj6x9S-dDOfythAjlw0Hwc8 2026-09-20 00:00:10+00:00| published-proof-of-concept| Telegram/FtCIultLb3jdqKkaMJKZnmj6x9S-dDOfythAjlw0Hwc8 2026-09-25 09:17:11+00:00| seen|...

CVE-2026-16265

creationtimestamp| type| source ---|---|--- 2026-09-18 21:00:05+00:00| seen| Telegram/H7T7dK3uqmkjlkp23xt7S3AYXc4CzofFX2dd1POZQ2XzQMI 2026-09-19 00:00:09+00:00| published-proof-of-concept| Telegram/H7T7dK3uqmkjlkp23xt7S3AYXc4CzofFX2dd1POZQ2XzQMI 2026-09-22 07:00:11+00:00| seen|...

CVE-2026-18464

creationtimestamp| type| source ---|---|--- 2026-09-18 21:00:04+00:00| seen| Telegram/H7T7dK3uqmkjlkp23xt7S3AYXc4CzofFX2dd1POZQ2XzQMI 2026-09-19 00:00:09+00:00| published-proof-of-concept| Telegram/H7T7dK3uqmkjlkp23xt7S3AYXc4CzofFX2dd1POZQ2XzQMI 2026-09-22 07:00:11+00:00| seen|...

CVE-2026-57263

creationtimestamp| type| source ---|---|--- 2026-09-18 20:00:04+00:00| seen| https://t.me/icscert/1432 2026-09-19 00:00:11+00:00| seen| https://t.me/icscert/1432...

CVE-2026-57262

creationtimestamp| type| source ---|---|--- 2026-09-18 20:00:04+00:00| seen| https://t.me/icscert/1432 2026-09-19 00:00:11+00:00| seen| https://t.me/icscert/1432...

GHSA-PP25-4CG4-QCR9

creationtimestamp| type| source ---|---|--- 2026-09-18 20:00:03+00:00| seen| https://t.me/GithubRedTeam/102707 2026-09-19 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102707...

CVE-2023-21288

creationtimestamp| type| source ---|---|--- 2026-09-18 14:00:04+00:00| published-proof-of-concept| Telegram/jal93TFIpDSXHuxPAVoXUYLkFRmAEbvfXme4VCIXcHlI9Tk 2026-09-19 00:00:34+00:00| published-proof-of-concept| Telegram/jal93TFIpDSXHuxPAVoXUYLkFRmAEbvfXme4VCIXcHlI9Tk...

CVE-2018-10546

creationtimestamp| type| source ---|---|--- 2026-09-18 14:00:04+00:00| published-proof-of-concept| Telegram/jal93TFIpDSXHuxPAVoXUYLkFRmAEbvfXme4VCIXcHlI9Tk 2026-09-19 00:00:27+00:00| published-proof-of-concept| Telegram/jal93TFIpDSXHuxPAVoXUYLkFRmAEbvfXme4VCIXcHlI9Tk...

GHSA-JH4V-GFQJ-7RHX

creationtimestamp| type| source ---|---|--- 2026-09-18 12:00:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3468 2026-09-19 00:00:37+00:00| published-proof-of-concept| https://t.me/bdufstecru/3468...

CVE-2026-75516

creationtimestamp| type| source ---|---|--- 2026-09-18 12:00:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3468 2026-09-19 00:00:37+00:00| published-proof-of-concept| https://t.me/bdufstecru/3468...