CVE-2026-34908

creationtimestamp| type| source ---|---|--- 2026-05-26 09:13:20+00:00| seen| https://ccb.belgium.be/advisories/warning-ubiquiti-has-addressed-multiple-critical-vulnerabilities-unifi-os-patch 2026-05-26 16:30:06+00:00| seen| https://t.me/truesecator/8245 2026-05-27 06:38:42+00:00| seen|...

CVE-2026-27384

creationtimestamp| type| source ---|---|--- 2026-05-26 09:00:05+00:00| seen| https://t.me/GithubRedTeam/85938 2026-05-27 21:10:45+00:00| seen| Telegram/GF77XqZ1LHaWDL2kD1JemKeP32DvhHpTDQqckw5Eq33XXvc...

CVE-2025-8754

creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-03...

CVE-2026-46670

creationtimestamp| type| source ---|---|--- 2026-05-25 23:11:12+00:00| seen| https://t.me/realcodeb0ss/440 2026-05-26 02:13:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46670.yaml...

Malicious code in etherproxy-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5756836b470f645f316696cbaedb1aedc21cde7fc921714bfbf70f2d528ad5b4 The bundled dist/index.js reads process.env values and posts data to https://api.telegram.org via a hardcoded fetch call line 97, with additional...

MAL-2026-4552 Malicious code in etherproxy-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5756836b470f645f316696cbaedb1aedc21cde7fc921714bfbf70f2d528ad5b4 The bundled dist/index.js reads process.env values and posts data to https://api.telegram.org via a hardcoded fetch call line 97, with additional...

CVE-2026-9389

creationtimestamp| type| source ---|---|--- 2026-05-25 14:45:36+00:00| seen| https://t.me/bdufstecru/3193...

CVE-2026-47102

creationtimestamp| type| source ---|---|--- 2026-05-25 14:00:04+00:00| seen| https://t.me/GithubRedTeam/85833 2026-05-25 15:00:12+00:00| seen| Telegram/X1SzwuqpRNev2GcuASsATzQD-1aeqEPKRVacdyAUElWlBI 2026-05-25 21:00:04+00:00| seen| Telegram/DE8V0W55Lks0xFUNDp9UGyNB0T-CRSwfpeIrdYc5V2Tnj4 2026-06-1...

Malicious code in atel-mcp-openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...

MAL-2026-4485 Malicious code in atel-mcp-openclaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...

CVE-2026-38426

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

CVE-2026-38427

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

CVE-2026-38422

creationtimestamp| type| source ---|---|--- 2026-05-25 11:00:06+00:00| seen| https://t.me/GithubRedTeam/85810 2026-05-25 11:00:08+00:00| seen| Telegram/-Rw1GdqgLbdPMkOwlVEIvz70NMtSIs0WWvrIrO5vIfavaPE 2026-05-25 15:00:06+00:00| seen| Telegram/p4pSz48sW8Fl1dqUeH21RBDMwtfRPHmaTBryFak7xdWuTDY...

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks targeting financial and cryptocurrency organizations. RemotePE, per NCC Group subsidiary Fox-IT, is part of a multi-stage attack chain...

CVE-2026-36239

creationtimestamp| type| source ---|---|--- 2026-05-25 02:00:04+00:00| seen| https://t.me/GithubRedTeam/85759 2026-05-25 03:00:10+00:00| seen| Telegram/PWXxTbzLBS2I2NTEEZXYxWglH9J71PY-BvJO95sfjgRqY3E 2026-05-25 09:00:04+00:00| seen| Telegram/hq1WnakkbxJpSdatpwq9NAKRiUtHFa8ysgfQqaCqIO8mwqo...

Malicious code in wallet-agent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb49d047eeab68307095cf3a30ff0d42d745855890f181e4cb53dc2f6903e91 dist/agent.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org used in a fetch/POST call near references to process.env. The...

MAL-2026-4708 Malicious code in wallet-agent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb49d047eeab68307095cf3a30ff0d42d745855890f181e4cb53dc2f6903e91 dist/agent.js contains a hardcoded Telegram Bot API endpoint https://api.telegram.org used in a fetch/POST call near references to process.env. The...

CVE-2026-1802

creationtimestamp| type| source ---|---|--- 2026-05-22 17:10:55+00:00| seen| https://bsky.app/profile/theresidentmachine.bsky.social/post/3mmhgid6im32q...

Malicious code in events-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...

MAL-2026-4555 Malicious code in events-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...