MAL-2026-3672 Malicious code in 1mi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ec5fa97918431510ba9ef57d3d601738891094478b5ebf996a3eafa0cb960 This package masquerades as a Cloudflare Worker Telegraf middleware README: 'cfworker-middware-telegraf' but its main module unconditionally forwards...

Malicious code in 1co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09cc40cc6a0084f383fd0a359be04fa0d0e5aed50e9f4b78d8714868fc35ca4 The package's main entry index.js exports a console replacement whose.info method silently POSTs caller-provided arguments to a hardcoded Telegram...

MAL-2026-3671 Malicious code in 1co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09cc40cc6a0084f383fd0a359be04fa0d0e5aed50e9f4b78d8714868fc35ca4 The package's main entry index.js exports a console replacement whose.info method silently POSTs caller-provided arguments to a hardcoded Telegram...

Malicious code in 8oo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c949ba1ac1cd3a6c96d3f1fc8c32cdc64cb9474fa07dd6633ebf4f69073a495 The package's main entry index.js executes an IIFE at require time that loads 66o.js, which replaces the global console with a Proxy. Every intercept...

MAL-2026-3677 Malicious code in 8oo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c949ba1ac1cd3a6c96d3f1fc8c32cdc64cb9474fa07dd6633ebf4f69073a495 The package's main entry index.js executes an IIFE at require time that loads 66o.js, which replaces the global console with a Proxy. Every intercept...

Malicious code in 11j (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad371791d84a3c28ca12b62bae45a07567847b7df025c93611f8f504a1c869 the analysis identified unambiguous malicious behavior in log.js the package main: an IIFE executes on require/import that monkey-patches...

MAL-2026-3670 Malicious code in 11j (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad371791d84a3c28ca12b62bae45a07567847b7df025c93611f8f504a1c869 the analysis identified unambiguous malicious behavior in log.js the package main: an IIFE executes on require/import that monkey-patches...

CVE-2026-33657

creationtimestamp| type| source ---|---|--- 2026-05-12 03:00:06+00:00| seen| Telegram/no9VrmuWpYCotL5oqRbnMQdNuDYSzv-XRgybXr9t8Fk0Js...

CVE-2026-8161

creationtimestamp| type| source ---|---|--- 2026-05-11 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/83859 2026-05-11 23:00:11+00:00| seen| Telegram/e-kNblg5cCIACsW4hX0Z7Izc7Q-BrD-tkcFevHWmjItb6g 2026-05-12 03:00:06+00:00| seen|...

CVE-2026-22550

creationtimestamp| type| source ---|---|--- 2026-05-11 22:15:50+00:00| seen| https://jvn.jp/en/jp/JVN94012927...

CVE-2026-45672

creationtimestamp| type| source ---|---|--- 2026-05-11 19:49:14+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-482j-2pq6-q5w4 2026-05-16 03:00:09+00:00| published-proof-of-concept| Telegram/5H9SK3yyS3giBAkv2mHN9g8Q9G6NzXn4WyrOVk5PfdIIk...

GHSA-39QR-RC93-VHQM Bird-lg-go has a Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding

Summary The apiHandler and similarly webHandlerTelegramBot processes user-provided JSON payloads by directly using json.NewDecoderr.Body.Decode&request without restricting the maximum read size. An unauthenticated remote attacker can stream an extremely large, endless JSON payload e.g., several...

MAL-2026-3426 Malicious code in mpkg123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 df9e0498d827adeb16ea11e4a1137133d2124f039942b776f7ac098a257cd164 If executed as a module, the obfuscated code collects and exfiltrates sensitive data, including passwords saved in a browser. --- Category: MALICIOUS - The...

Malicious code in mpkg123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 df9e0498d827adeb16ea11e4a1137133d2124f039942b776f7ac098a257cd164 If executed as a module, the obfuscated code collects and exfiltrates sensitive data, including passwords saved in a browser. --- Category: MALICIOUS - The...

CVE-2026-44582

creationtimestamp| type| source ---|---|--- 2026-05-11 06:42:58+00:00| published-proof-of-concept| https://t.me/htfgtps/1107 2026-07-09 03:00:04+00:00| seen| https://t.me/brutsecurity/2701 2026-07-10 00:00:11+00:00| seen| https://t.me/brutsecurity/2701 2026-07-11 09:00:04+00:00|...

CVE-2026-36981

creationtimestamp| type| source ---|---|--- 2026-05-10 23:00:14+00:00| seen| Telegram/4E6rSRxwI8rbj53U5V5E-Exh2Wmlv2Bw5SwE4GoCs4Wb5U 2026-05-11 03:00:06+00:00| seen| Telegram/mGI2CRHqQCjyvA6ju1XF5IWDLp0GZA5xrkAMw9kytXRmaE...

CVE-2026-36980

creationtimestamp| type| source ---|---|--- 2026-05-10 21:00:04+00:00| seen| https://t.me/GithubRedTeam/83710 2026-05-10 23:00:14+00:00| seen| Telegram/4E6rSRxwI8rbj53U5V5E-Exh2Wmlv2Bw5SwE4GoCs4Wb5U 2026-05-11 03:00:06+00:00| seen| Telegram/mGI2CRHqQCjyvA6ju1XF5IWDLp0GZA5xrkAMw9kytXRmaE...

CVE-2026-45401

creationtimestamp| type| source ---|---|--- 2026-05-10 19:43:36+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6 2026-05-26 08:00:06+00:00| seen| https://t.me/GithubRedTeam/85934 2026-05-27 21:12:27+00:00| seen|...

CVE-2026-45397

creationtimestamp| type| source ---|---|--- 2026-05-10 19:35:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-65pg-qhhw-mxwg 2026-05-19 20:21:05+00:00| seen| https://t.me/realcodeb0ss/429 2026-06-01 01:19:48+00:00| confirmed|...

CVE-2020-14008

creationtimestamp| type| source ---|---|--- 2026-05-09 21:00:04+00:00| seen| Telegram/2GOBEcnqip1knIIvIE3w-bxwIdIiVvDIafo-JgnC3bf9M 2026-09-26 18:04:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/103465 2026-09-27 03:00:05+00:00| seen|...