Malicious code in morin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c27d25a4c203cbb89156281fbacc7feb424a09eaa296f7c3dedff860891f1f morin/common.py hardcodes an HTTP proxy at 191.102.147.15:8000 with embedded credentials proxies = 'https': 'http://5TUMV6:[email protected]:8000...

MAL-2026-4757 Malicious code in morin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c27d25a4c203cbb89156281fbacc7feb424a09eaa296f7c3dedff860891f1f morin/common.py hardcodes an HTTP proxy at 191.102.147.15:8000 with embedded credentials proxies = 'https': 'http://5TUMV6:[email protected]:8000...

Malicious code in claude-all-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c5a1f5a6f5bd2dadc4e207ff4e8e310c24cd4c99c751ed094251e00e0af8f3 On install, postinstall.js writes configuration into /.claude/, /.gemini/, /.codex/, and /.kiro/ that hard-wires AI tooling to author-controlled...

MAL-2026-4522 Malicious code in claude-all-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c5a1f5a6f5bd2dadc4e207ff4e8e310c24cd4c99c751ed094251e00e0af8f3 On install, postinstall.js writes configuration into /.claude/, /.gemini/, /.codex/, and /.kiro/ that hard-wires AI tooling to author-controlled...

Malicious code in cheaty-sync-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b192c71c59ccca1d9cc720372bd29f39eae8b5da4d572cd1e8312d6b57d6b4 cheaty-sync-bot ships a clipboard-sync CLI that hardcodes a single Telegram bot token index.js:10 owned by the package author. There is no...

MAL-2026-4518 Malicious code in cheaty-sync-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b192c71c59ccca1d9cc720372bd29f39eae8b5da4d572cd1e8312d6b57d6b4 cheaty-sync-bot ships a clipboard-sync CLI that hardcodes a single Telegram bot token index.js:10 owned by the package author. There is no...

CVE-2026-30691

creationtimestamp| type| source ---|---|--- 2026-05-19 15:00:05+00:00| seen| https://t.me/GithubRedTeam/84834 2026-05-19 21:00:04+00:00| published-proof-of-concept| Telegram/SM41ZgDjE5GCx8K5BndOjKQZfdnq7khstyXQtIQ9aWd83s...

GHSA-8JQP-QV73-395R

creationtimestamp| type| source ---|---|--- 2026-05-19 12:39:14+00:00| seen| Telegram/SPO6iT-d8-bIQWZXI60t6OwvPUIqsHGwkcNiX5JYtOrng...

CVE-2026-5203

creationtimestamp| type| source ---|---|--- 2026-05-19 03:00:11+00:00| published-proof-of-concept| Telegram/-GtOjHLopjI3IaPVfvZorB58d5FmtAfesT4Onu4QlAoHy4...

CVE-2026-36438

creationtimestamp| type| source ---|---|--- 2026-05-18 01:00:04+00:00| seen| https://t.me/GithubRedTeam/84611 2026-05-18 09:00:04+00:00| published-proof-of-concept| Telegram/x3hQR0-UI2JUxQyjcWHc5kHBpfVh3Jms4Hr2XANxyksqy3E...

CVE-2026-38698

creationtimestamp| type| source ---|---|--- 2026-05-17 21:00:04+00:00| seen| Telegram/FMujIRa9WJxg8stLSMyK9s8hezzOoxBzO2QROQaixpXJv8...

CVE-2026-38699

creationtimestamp| type| source ---|---|--- 2026-05-17 21:00:04+00:00| seen| Telegram/FMujIRa9WJxg8stLSMyK9s8hezzOoxBzO2QROQaixpXJv8...

CVE-2026-6145

creationtimestamp| type| source ---|---|--- 2026-05-14 19:00:10+00:00| published-proof-of-concept| Telegram/XDvWvSLpOLgWYjCnx5nXaVDhxhCY5P5ucZ2jMelcgSmye8Y 2026-05-14 21:00:04+00:00| seen| Telegram/pxejltfM6t0bOCIPs7C1JhjfACvEO7Gy-x7DlZhJbRtGeV0 2026-07-10 20:17:00+00:00| seen|...

CVE-2026-40701

creationtimestamp| type| source ---|---|--- 2026-05-14 17:00:08+00:00| seen| https://t.me/truesecator/8204 2026-05-18 05:12:49+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mm44hn2v5cs2 2026-05-19 08:05:32+00:00| seen|...

CVE-2026-42934

creationtimestamp| type| source ---|---|--- 2026-05-14 17:00:08+00:00| seen| https://t.me/truesecator/8204 2026-05-19 08:05:32+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-nginx-leading-remote-code-execution-and-allowing-rate...

CVE-2026-42946

creationtimestamp| type| source ---|---|--- 2026-05-14 17:00:08+00:00| seen| https://t.me/truesecator/8204 2026-05-19 08:05:32+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-nginx-leading-remote-code-execution-and-allowing-rate...

CVE-2025-39776

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-39790

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-39783

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-38670

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...