MAL-2026-14516 Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...

CVE-2026-26211

creationtimestamp| type| source ---|---|--- 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99668 2026-08-26 00:00:09+00:00| seen| https://t.me/GithubRedTeam/99668...

Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

MAL-2026-14492 Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

CVE-2023-30628

creationtimestamp| type| source ---|---|--- 2026-08-25 11:00:03+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI 2026-08-26 00:00:10+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI...

CVE-2026-43914

creationtimestamp| type| source ---|---|--- 2026-08-25 11:00:03+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99533 2026-08-26 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-76640

creationtimestamp| type| source ---|---|--- 2026-08-25 11:00:03+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99549 2026-08-26 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-76639

creationtimestamp| type| source ---|---|--- 2026-08-25 11:00:03+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99549 2026-08-26 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-15469

creationtimestamp| type| source ---|---|--- 2026-08-25 09:00:04+00:00| published-proof-of-concept| Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQsKZ-4Nh0Q9BWMtB8 2026-08-25 16:45:09+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-prodotti-tp-link 2026-08-25 19:00:04+00:00| seen|...

MAL-2026-14487 Malicious code in spotify-url-resolovela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f6315c9b94537e8f2ba85260ccc147a6fdf9ab19336609d10e9819db575045 On require/import of the package's main index.js, a top-level startBackupLoop call runs immediately and reschedules every 60 minutes. It archives the...

Malicious code in spotify-url-resolovela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f6315c9b94537e8f2ba85260ccc147a6fdf9ab19336609d10e9819db575045 On require/import of the package's main index.js, a top-level startBackupLoop call runs immediately and reschedules every 60 minutes. It archives the...

CVE-2026-65096: Improper Neutralization of Special Elements used in an OS Command

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

PT-2026-81512

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-52618

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:06+00:00| seen| Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29lRuMU0 2026-08-25 00:00:06+00:00| published-proof-of-concept| Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29lRuMU0...

CVE-2026-52616

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:06+00:00| seen| Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29lRuMU0 2026-08-25 00:00:07+00:00| published-proof-of-concept| Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29lRuMU0...

CVE-2026-19843

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-09-07 15:18:37+00:00| seen|...

CVE-2026-02777

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...

CVE-2024-66001

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...

CVE-2025-42558

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...

CVE-2026-03200

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...