Malicious Package

Overview albion-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to t...

Malicious Package

Overview gta5rp-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to t...

Malicious Package

Overview l2-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to the...

Malicious Package

Overview grandrp-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to...

Malicious Package

Overview majestic-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to...

MAL-2026-10611 Malicious code in @web3-helpers/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5230cf08adcdf1d9108129f5c80e569b74774b7f2cb5e55aeb60be8d737225 At npm install time the preinstall script dist/index.min.js reads installer-owned secrets — /.ssh/idrsa, /.env, /.env.local, /.wallet.json — and...

Malicious code in @web3-helpers/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5230cf08adcdf1d9108129f5c80e569b74774b7f2cb5e55aeb60be8d737225 At npm install time the preinstall script dist/index.min.js reads installer-owned secrets — /.ssh/idrsa, /.env, /.env.local, /.wallet.json — and...

CVE-2026-50518

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 21:00:04+00:00| seen| https://t.me/kasperskyb2b/2258 2026-07-14 21:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn4dlo3eb2d...

CVE-2026-50338

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:02+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0233 2026-07-14 22:02:32+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:00:56+00:00| seen|...

CVE-2026-50522

creationtimestamp| type| source ---|---|--- 2026-07-14 18:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmufqojqv2b 2026-07-14 19:00:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237 2026-07-14 21:00:04+00:00| seen| https://t.me/kasperskyb2b/2258...

django-oscar (>=1.1.0, <=1.1.1), django-oscar-telegram-bot (>=0.1.0, <=0.5.0) +2 more potentially affected by CVE-2026-59205 via pillow (2.7.0)

pillow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-oscar =1.1.0, =0.1.0, =0.1.0, =0.1.1, =0.2.1 Source cves: CVE-2026-59205 Source advisory: OSV:PYSEC-2026-3453...

Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold

Telegram's t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown...

GHSA-Q4Q6-R8WH-5CGH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:06+00:00| seen| https://t.me/bdufstecru/3243 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3243...

GHSA-GRP7-V8XH-RJ7H

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:06+00:00| seen| https://t.me/bdufstecru/3248 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3248 2026-08-26 11:32:18+00:00| seen| https://gist.github.com/alon710/50a574f48857c34c0cb9ded8ce78e9b5...

CVE-2026-56099

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3260 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3260 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187721 2026-09-02 01:00:21+00:00|...

GHSA-GW94-85M2-X8V2

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3258 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3258...

GHSA-2R5C-GW76-RH3W

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3290 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3290...

GHSA-4J6X-2764-M8GH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3289 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3289...

GHSA-G2PF-XV49-M2H5

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3288 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3288...

CVE-2026-34835

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3288 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3288 2026-07-16 19:00:23+00:00| seen| Telegram/XjrNCelxX9XYIj6aBUG9DViyRThtT0IoD7s9xRL3gDQjhs 2026-07-17...