Malicious code in 8oo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c949ba1ac1cd3a6c96d3f1fc8c32cdc64cb9474fa07dd6633ebf4f69073a495 The package's main entry index.js executes an IIFE at require time that loads 66o.js, which replaces the global console with a Proxy. Every intercept...

MAL-2026-3670 Malicious code in 11j (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad371791d84a3c28ca12b62bae45a07567847b7df025c93611f8f504a1c869 the analysis identified unambiguous malicious behavior in log.js the package main: an IIFE executes on require/import that monkey-patches...

Malicious code in 11j (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad371791d84a3c28ca12b62bae45a07567847b7df025c93611f8f504a1c869 the analysis identified unambiguous malicious behavior in log.js the package main: an IIFE executes on require/import that monkey-patches...

CVE-2026-33657

creationtimestamp| type| source ---|---|--- 2026-05-12 03:00:06+00:00| seen| Telegram/no9VrmuWpYCotL5oqRbnMQdNuDYSzv-XRgybXr9t8Fk0Js...

CVE-2026-8161

creationtimestamp| type| source ---|---|--- 2026-05-11 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/83859 2026-05-11 23:00:11+00:00| seen| Telegram/e-kNblg5cCIACsW4hX0Z7Izc7Q-BrD-tkcFevHWmjItb6g 2026-05-12 03:00:06+00:00| seen|...

CVE-2026-22550

creationtimestamp| type| source ---|---|--- 2026-05-11 22:15:50+00:00| seen| https://jvn.jp/en/jp/JVN94012927...

CVE-2026-45672

creationtimestamp| type| source ---|---|--- 2026-05-11 19:49:14+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-482j-2pq6-q5w4 2026-05-16 03:00:09+00:00| published-proof-of-concept| Telegram/5H9SK3yyS3giBAkv2mHN9g8Q9G6NzXn4WyrOVk5PfdIIk...

GHSA-39QR-RC93-VHQM Bird-lg-go has a Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding

Summary The apiHandler and similarly webHandlerTelegramBot processes user-provided JSON payloads by directly using json.NewDecoderr.Body.Decode&request without restricting the maximum read size. An unauthenticated remote attacker can stream an extremely large, endless JSON payload e.g., several...

MAL-2026-3426 Malicious code in mpkg123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 df9e0498d827adeb16ea11e4a1137133d2124f039942b776f7ac098a257cd164 If executed as a module, the obfuscated code collects and exfiltrates sensitive data, including passwords saved in a browser. --- Category: MALICIOUS - The...

Malicious code in mpkg123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 df9e0498d827adeb16ea11e4a1137133d2124f039942b776f7ac098a257cd164 If executed as a module, the obfuscated code collects and exfiltrates sensitive data, including passwords saved in a browser. --- Category: MALICIOUS - The...

CVE-2026-44582

creationtimestamp| type| source ---|---|--- 2026-05-11 06:42:58+00:00| published-proof-of-concept| https://t.me/htfgtps/1107 2026-07-09 03:00:04+00:00| seen| https://t.me/brutsecurity/2701 2026-07-10 00:00:11+00:00| seen| https://t.me/brutsecurity/2701 2026-07-11 09:00:04+00:00|...

CVE-2026-36981

creationtimestamp| type| source ---|---|--- 2026-05-10 23:00:14+00:00| seen| Telegram/4E6rSRxwI8rbj53U5V5E-Exh2Wmlv2Bw5SwE4GoCs4Wb5U 2026-05-11 03:00:06+00:00| seen| Telegram/mGI2CRHqQCjyvA6ju1XF5IWDLp0GZA5xrkAMw9kytXRmaE...

CVE-2026-36980

creationtimestamp| type| source ---|---|--- 2026-05-10 21:00:04+00:00| seen| https://t.me/GithubRedTeam/83710 2026-05-10 23:00:14+00:00| seen| Telegram/4E6rSRxwI8rbj53U5V5E-Exh2Wmlv2Bw5SwE4GoCs4Wb5U 2026-05-11 03:00:06+00:00| seen| Telegram/mGI2CRHqQCjyvA6ju1XF5IWDLp0GZA5xrkAMw9kytXRmaE...

CVE-2026-45401

creationtimestamp| type| source ---|---|--- 2026-05-10 19:43:36+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6 2026-05-26 08:00:06+00:00| seen| https://t.me/GithubRedTeam/85934 2026-05-27 21:12:27+00:00| seen|...

CVE-2026-45397

creationtimestamp| type| source ---|---|--- 2026-05-10 19:35:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-65pg-qhhw-mxwg 2026-05-19 20:21:05+00:00| seen| https://t.me/realcodeb0ss/429 2026-06-01 01:19:48+00:00| confirmed|...

CVE-2020-14008

creationtimestamp| type| source ---|---|--- 2026-05-09 21:00:04+00:00| seen| Telegram/2GOBEcnqip1knIIvIE3w-bxwIdIiVvDIafo-JgnC3bf9M...

CVE-2026-37637

creationtimestamp| type| source ---|---|--- 2026-05-08 23:00:14+00:00| seen| Telegram/LC5SFiBlyVsYz5nFxMIF0DwNhP8sAhP-uFeQgkFZemEiCI 2026-05-09 03:00:05+00:00| seen| Telegram/eyAghHZewMQ85hQZ8LvzSeAPhb6BlDwFjZXgEDDJNJoZoDs 2026-06-29 23:31:44+00:00| seen|...

CVE-2026-32743

creationtimestamp| type| source ---|---|--- 2026-05-08 21:00:04+00:00| seen| Telegram/L06xv0vmv9B-lUjnDANUtY1-6vQFMFDzrcYuiA5m0MAZkY 2026-06-11 18:40:48+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnzuth3bkmi2 2026-06-11 19:45:32+00:00| see...

CVE-2026-32707

creationtimestamp| type| source ---|---|--- 2026-05-08 15:00:06+00:00| published-proof-of-concept| Telegram/bpwD1lFGrjpZJE8nZPfkQ7he0n0Dc1Zua8DNoZEQncgtG5Y...

CVE-2026-33534

creationtimestamp| type| source ---|---|--- 2026-05-08 14:59:30+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-33534.yaml 2026-05-08 21:00:04+00:00| seen| Telegram/L06xv0vmv9B-lUjnDANUtY1-6vQFMFDzrcYuiA5m0MAZkY...