Malicious code in h4xupdate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0de4da975d7b071824607be751a9ea0fb13e409eaef58d1cc0628263d5dea700 Package contains a remote control tool taking orders from a hardcoded Telegram bot. The authorship impersonate legitimate company. --- Category: MALICIOUS - Th...

MAL-2026-5093 Malicious code in h4xupdate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0de4da975d7b071824607be751a9ea0fb13e409eaef58d1cc0628263d5dea700 Package contains a remote control tool taking orders from a hardcoded Telegram bot. The authorship impersonate legitimate company. --- Category: MALICIOUS - Th...

CVE-2026-7392

creationtimestamp| type| source ---|---|--- 2026-05-30 15:00:07+00:00| seen| Telegram/J8DlVyKG2Ha88-DPAHAkyXqdyfexfy2s10iFJfB3MNT4g...

CVE-2026-9490

creationtimestamp| type| source ---|---|--- 2026-05-30 11:00:11+00:00| seen| Telegram/yYHRBxvUjQ02015bx83J8tkOO2fwWdsxD6Ne1eYIS9oW1lo 2026-05-30 15:00:07+00:00| seen| Telegram/J8DlVyKG2Ha88-DPAHAkyXqdyfexfy2s10iFJfB3MNT4g...

CVE-2026-46552

creationtimestamp| type| source ---|---|--- 2026-05-30 03:00:05+00:00| seen| Telegram/90RQ9hYtGaiQArsrNQjzkMS9V8ZquthAYQcfSQsotfwm9eA 2026-07-13 22:00:18+00:00| seen| https://t.me/GithubRedTeam/90510 2026-07-14 00:00:35+00:00| seen| https://t.me/GithubRedTeam/90510 2026-07-15 00:00:20+00:00|...

CVE-2026-44595

creationtimestamp| type| source ---|---|--- 2026-05-29 15:00:15+00:00| seen| Telegram/a86W4JR7O--z7UEFDSjPGooPu8cJg6Qw5misZZ2a8xOkaUM 2026-05-29 21:00:04+00:00| seen| Telegram/7EeES1995AuZh7L7sqmaK3TqJ83qHuwNNd4oo-aSS2rD4M...

CVE-2026-44596

creationtimestamp| type| source ---|---|--- 2026-05-29 15:00:15+00:00| seen| Telegram/a86W4JR7O--z7UEFDSjPGooPu8cJg6Qw5misZZ2a8xOkaUM 2026-05-29 21:00:04+00:00| seen| Telegram/7EeES1995AuZh7L7sqmaK3TqJ83qHuwNNd4oo-aSS2rD4M 2026-07-17 19:18:06+00:00| seen|...

CVE-2006-3918

creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:06+00:00| seen| Telegram/6s3VRd-d5V93Kqqbw2bpShp3KD9FSCashxK24K-SibeAsU...

CVE-2026-49009

creationtimestamp| type| source ---|---|--- 2026-05-29 01:00:04+00:00| seen| https://t.me/GithubRedTeam/86315 2026-05-29 03:00:06+00:00| seen| Telegram/6s3VRd-d5V93Kqqbw2bpShp3KD9FSCashxK24K-SibeAsU 2026-05-29 03:00:14+00:00| seen| Telegram/Qn2Yw-Arqj9R5Yfut3fo2kk-MUMI5L3773Y6jZ-lhjERXA 2026-06-0...

CVE-2026-38444

creationtimestamp| type| source ---|---|--- 2026-05-28 23:00:11+00:00| seen| Telegram/HUyRfo-cHzZ51YwpZ3y69e-xyV8JPGd2HpDpSewcZn78Q 2026-05-29 03:00:06+00:00| seen| Telegram/6s3VRd-d5V93Kqqbw2bpShp3KD9FSCashxK24K-SibeAsU...

CVE-2026-8380

creationtimestamp| type| source ---|---|--- 2026-05-28 15:00:16+00:00| seen| Telegram/vo-VgstXQuzhPYqY8B85GwxskfRMHrGkVpymMR7KirmWNUQ 2026-05-28 21:00:04+00:00| seen| Telegram/gT5VG53EHkYx7lJsNMzVATNBd8Pb7In7gs06zL9W87J77Dc 2026-06-26 07:30:28+00:00| seen|...

CVE-2021-22291

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-03 2026-05-28 20:05:50+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mmwt2n7ejt2e...

GHSA-5X7J-XJPX-PMM5

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:41+00:00| seen| https://t.me/GithubRedTeam/86181...

CVE-2025-50946

creationtimestamp| type| source ---|---|--- 2026-05-27 21:00:05+00:00| seen| Telegram/PMwLWJ8bCumUt1njp0TjasQmSGobRcnITTCtVX5oyv1QKE...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the apiHandler and webHandlerTelegramBot processes. An attacker can cause the application to exhaust system memory and crash by sending an extremely large or endless JSON payload over a single TCP connection...

CVE-2026-46275

creationtimestamp| type| source ---|---|--- 2026-05-26 16:00:05+00:00| seen| https://t.me/GithubRedTeam/86003 2026-05-27 21:11:38+00:00| seen| Telegram/gErohbwTCKTWlpvhKyjoMZM9ytnNcaUIrq9IFwI-Mxv4 2026-06-08 15:56:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116715303471454670...

MAL-2026-4816 Malicious code in amaco-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6204f29c39ab7a22921331bf33f2501b27fba9aac6a8b87b833caef9c5f506 dist/index.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org referenced from a fetch/POST call alongside process.env access...

Malicious code in amaco-os (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6204f29c39ab7a22921331bf33f2501b27fba9aac6a8b87b833caef9c5f506 dist/index.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org referenced from a fetch/POST call alongside process.env access...

CVE-2026-34908

creationtimestamp| type| source ---|---|--- 2026-05-26 09:13:20+00:00| seen| https://ccb.belgium.be/advisories/warning-ubiquiti-has-addressed-multiple-critical-vulnerabilities-unifi-os-patch 2026-05-26 16:30:06+00:00| seen| https://t.me/truesecator/8245 2026-05-27 06:38:42+00:00| seen|...

CVE-2026-27384

creationtimestamp| type| source ---|---|--- 2026-05-26 09:00:05+00:00| seen| https://t.me/GithubRedTeam/85938 2026-05-27 21:10:45+00:00| seen| Telegram/GF77XqZ1LHaWDL2kD1JemKeP32DvhHpTDQqckw5Eq33XXvc...