CVE-2026-39113

creationtimestamp| type| source ---|---|--- 2026-08-21 16:00:04+00:00| seen| Telegram/6ucW9mtXNyvhM6wkgMEsY9neWTK-pNNF7XSM3aSxwwcjb4 2026-08-22 00:00:28+00:00| published-proof-of-concept| Telegram/6ucW9mtXNyvhM6wkgMEsY9neWTK-pNNF7XSM3aSxwwcjb4 2026-08-22 18:43:40+00:00| seen|...

Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

CVE-2026-18501

creationtimestamp| type| source ---|---|--- 2026-08-20 20:00:03+00:00| seen| https://t.me/captainsmok3rofficial/449 2026-08-20 20:00:03+00:00| seen| https://t.me/captainsmok3rofficial/447 2026-08-21 00:00:08+00:00| published-proof-of-concept| https://t.me/captainsmok3rofficial/447 2026-08-21...

CVE-2026-76071

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:06+00:00| seen...

CVE-2026-76070

creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:05+00:00| seen...

CVE-2026-15315

creationtimestamp| type| source ---|---|--- 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-09-16 16:32:56+00:00| seen|...

Malicious code in deepface-weight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethonmarketuserbot.session for...

MAL-2026-14158 Malicious code in deepface-weight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethonmarketuserbot.session for...

Malicious code in deepface-weights (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558 On import, deepfaceweights starts a daemon thread that polls every 10 seconds for the file data/telethonmarketuserbot.session in the current working...

MAL-2026-14132 Malicious code in deepface-weights (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558 On import, deepfaceweights starts a daemon thread that polls every 10 seconds for the file data/telethonmarketuserbot.session in the current working...

MAL-2026-14131 Malicious code in infogram-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245 [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.checkoutputcmd,...

Malicious code in infogram-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245 [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.checkoutputcmd,...

Malicious code in httpz-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004770b4da0c6705f95ef2c8654fd81d37650ffacaad7160041bded02cdb7fbc httpz-requests exposes a Telegram bot startbot, runcmdenc, httprequest whose message handler executes arbitrary shell commands on the host running th...

MAL-2026-14130 Malicious code in httpz-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004770b4da0c6705f95ef2c8654fd81d37650ffacaad7160041bded02cdb7fbc httpz-requests exposes a Telegram bot startbot, runcmdenc, httprequest whose message handler executes arbitrary shell commands on the host running th...

CVE-2024-40275

creationtimestamp| type| source ---|---|--- 2026-08-18 12:00:03+00:00| published-proof-of-concept| Telegram/mmWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU 2026-08-19 00:00:26+00:00| published-proof-of-concept| Telegram/mmWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU...

CVE-2026-19650

creationtimestamp| type| source ---|---|--- 2026-08-18 04:00:03+00:00| published-proof-of-concept| Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktHwo 2026-08-18 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117115691222589671 2026-08-18 12:15:24+00:00| seen|...

CVE-2026-71518

creationtimestamp| type| source ---|---|--- 2026-08-18 01:00:04+00:00| published-proof-of-concept| Telegram/GwuC3cy-OzU2KFCuHYMrTkUTBOKWE1Dd5EfEUwy3SR6M 2026-08-18 04:00:03+00:00| published-proof-of-concept| Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktHwo 2026-08-19 00:00:27+00:00|...

TENET: Telegram Mini App (In)Security

Telegram, with over 450 million daily active users, has introduced Mini Apps---web-based applications running directly within its client. However, this integration introduces notable security risks. As we demonstrate, many Mini Apps store authentication materials---such as session tokens and wall...

MAL-2026-14100 Malicious code in socks5901 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e6184fc1c33621ffa99f06b96ac94f05944bc3c7b431243e50ede0bb396e7dd3 During import, package exfiltrates all files from "/sdcard/" --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...