CVE-2026-35058

creationtimestamp| type| source ---|---|--- 2026-05-22 13:23:01+00:00| seen| https://t.me/bdufstecru/3185 2026-06-09 10:28:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116719675940851268...

CVE-2024-53667

creationtimestamp| type| source ---|---|--- 2026-05-22 11:00:14+00:00| seen| Telegram/Ijp4jLwZAukIpjn8nmvArm7-nJ19glZ2axxpP-42cGx43y8 2026-05-22 15:00:07+00:00| seen| Telegram/QQT-Q6OUMbbPAXT-HqeuIDXp1trXX8UiN3jKLc4d4AIZQ...

MAL-2026-4395 Malicious code in @inetafrica/open-claudia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2fde4b2f69d2aa99c4fcc7ed5b04bd029394caf40067eb2be6987bf30a1b03 The package ships multiple modules health.js, setup.js, bot.js, core/media.js, core/handlers.js that combine childprocess, fs, and https to build and...

Malicious code in @inetafrica/open-claudia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b3881ec598069649e57612f04359886ef22331899541885248ea6a0a41bce2 Multiple files in this package contain a Telegram-bot-based command-and-control and exfiltration framework wired to install/runtime-reachable code...

CVE-2025-6919

creationtimestamp| type| source ---|---|--- 2026-05-22 09:13:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmglswv2uz2c...

CVE-2026-46680

creationtimestamp| type| source ---|---|--- 2026-05-21 10:00:04+00:00| seen| https://t.me/GithubRedTeam/85189 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI 2026-05-21 21:00:05+00:00| seen| Telegram/6gh1HJgE3RFVn7K8UtbcJPpJwEYzEQXCykvkUTLZjGZEDc 2026-05-2...

CVE-2026-38763

creationtimestamp| type| source ---|---|--- 2026-05-21 09:00:04+00:00| seen| Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM...

CVE-2026-38765

creationtimestamp| type| source ---|---|--- 2026-05-21 09:00:04+00:00| seen| Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM...

CVE-2026-38766

creationtimestamp| type| source ---|---|--- 2026-05-21 09:00:04+00:00| seen| Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM...

CVE-2026-38764

creationtimestamp| type| source ---|---|--- 2026-05-21 09:00:04+00:00| seen| Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM...

CVE-2016-0714

creationtimestamp| type| source ---|---|--- 2026-05-21 09:00:04+00:00| seen| Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM...

CVE-2026-45250

creationtimestamp| type| source ---|---|--- 2026-05-21 05:00:04+00:00| seen| https://t.me/GithubRedTeam/85149 2026-05-21 07:00:13+00:00| seen| Telegram/0oVkH4V3C9Cndp9LVxg4I8W2m2s-mbtiL-m94vGYIMA5C-Q 2026-05-21 09:00:04+00:00| seen| Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM...

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign

A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences...

CVE-2026-30950

creationtimestamp| type| source ---|---|--- 2026-05-20 19:00:04+00:00| seen| https://t.me/GithubRedTeam/85076 2026-05-20 23:00:11+00:00| published-proof-of-concept| Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg 2026-05-21 03:00:06+00:00| seen|...

Malicious code in ethers-wallet-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6dae6dc459fa2ef437e532af4b27b6c50360a40cdb9d91563d25a48bae88cec Package name impersonates the official @ethersproject/wallet, and package.json spoofs the ethers.js maintainer identity author 'Richard Moore '. The...

MAL-2026-4553 Malicious code in ethers-wallet-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6dae6dc459fa2ef437e532af4b27b6c50360a40cdb9d91563d25a48bae88cec Package name impersonates the official @ethersproject/wallet, and package.json spoofs the ethers.js maintainer identity author 'Richard Moore '. The...

MAL-2026-4773 Malicious code in vlifegram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8771013473b84f29159a80ec15ce3e9897bc69908ddfa2438845811dd276d87c VLifeGram is published under its own name on PyPI but installs into the pyrogram/ namespace and ships a Pyrogram fork at version 2.1.2.4. It adds an...

GHSA-5C46-X3QW-Q7J7

creationtimestamp| type| source ---|---|--- 2026-05-20 14:50:44+00:00| seen| https://t.me/bdufstecru/3182 2026-08-11 09:43:37+00:00| seen| https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe...

GHSA-CQ46-HP4H-CVFR

creationtimestamp| type| source ---|---|--- 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...

CVE-2026-48030

creationtimestamp| type| source ---|---|--- 2026-05-20 13:11:25+00:00| published-proof-of-concept| https://github.com/pheditor/pheditor/security/advisories/GHSA-jvc5-6g7q-c843 2026-05-28 11:00:13+00:00| seen| Telegram/mMN-AjvGpcaE-zo6q0YmV9Qj204A53PE-cWPysE2p8vKVY 2026-07-27 19:02:05+00:00| seen|...