MAL-2026-13681 Malicious code in btcflip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...

MAL-2026-13683 Malicious code in kotoraka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b7d2fa2d2e401d5ca6c2cc4bb07964a955afa5e532e3947fdcfd6395570dd6 On import, kotoraka decodes base64-obfuscated filesystem paths pointing at the user's Monero wallet directory Windows: C:\Users\Documents\Monero;...

Malicious code in kotoraka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b7d2fa2d2e401d5ca6c2cc4bb07964a955afa5e532e3947fdcfd6395570dd6 On import, kotoraka decodes base64-obfuscated filesystem paths pointing at the user's Monero wallet directory Windows: C:\Users\Documents\Monero;...

Malicious code in hex-encode-utils (npm)

hex-encode-utils is a purpose-built npm trojan that masquerades as a zero-dependency hex encoding/decoding utility published by the npm account devroolx under the repo github.com/stdlib-utils/hex-encode-utils. It is a multi-stage downloader/loader that runs automatically on install via a...

CVE-2021-30109

creationtimestamp| type| source ---|---|--- 2026-08-09 19:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97335 2026-08-10 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97335...

CVE-2021-31532

creationtimestamp| type| source ---|---|--- 2026-08-09 05:02:33+00:00| seen| Telegram/xS3Z9NpCoU2LJfvDLCd1Olb4PnPVbToMQS6j0RMReaGsm0 2026-08-10 00:00:10+00:00| seen| Telegram/xS3Z9NpCoU2LJfvDLCd1Olb4PnPVbToMQS6j0RMReaGsm0...

CVE-2026-19193

creationtimestamp| type| source ---|---|--- 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97247 2026-08-09 14:02:14+00:00| published-proof-of-concept| Telegram/VAAzSGKzAQvYxwRmewz7wzWwcveJmhSJJnhaglxzv2vacM 2026-08-10 00:00:09+00:00| published-proof-of-concept|...

GHSA-HHV7-P4PG-WM6P

creationtimestamp| type| source ---|---|--- 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/865 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/925 2026-08-10 00:00:32+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/865 2026-08-10 00:00:33+00:00|...

CVE-2023-30000

creationtimestamp| type| source ---|---|--- 2026-08-09 01:19:36+00:00| published-proof-of-concept| Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli9yVwlxO3uxT68v6BA...

CVE-2026-71557

creationtimestamp| type| source ---|---|--- 2026-08-08 03:02:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97106 2026-08-08 10:39:06+00:00| seen| https://gist.github.com/alon710/71d0ff9c71dc1f5ee8e40bba3da46014 2026-08-09 00:29:23+00:00| published-proof-of-concept|...

CVE-2024-24210

creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:15+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I 2026-08-08 00:04:27+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I...

CVE-2026-68742

creationtimestamp| type| source ---|---|--- 2026-08-07 14:05:27+00:00| published-proof-of-concept| https://t.me/bdufstecru/3369 2026-08-08 00:06:20+00:00| published-proof-of-concept| https://t.me/bdufstecru/3369...

CVE-2026-14365

creationtimestamp| type| source ---|---|--- 2026-08-07 13:00:04+00:00| seen| Telegram/MCYJbaY7Y1JiV57VXPInnrYmoyNrGbvHNXFyTTZxyGkIzQh 2026-08-07 18:00:03+00:00| seen| Telegram/y4yfNFl35EEKw5vv-LeIXH7MMyMaGazDVpTc0HRfJalwUA 2026-08-08 00:02:15+00:00| seen|...

Malicious code in blekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce64fb8d6264bfc9affaf6b3544637cb8559b232075b70a48144e5f1c1743020 blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module consoleApp/initializeLogger/getCurrentStatus from...

MAL-2026-13495 Malicious code in blekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce64fb8d6264bfc9affaf6b3544637cb8559b232075b70a48144e5f1c1743020 blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module consoleApp/initializeLogger/getCurrentStatus from...

CVE-2025-30374

creationtimestamp| type| source ---|---|--- 2026-08-07 10:17:15+00:00| seen| Telegram/zAJ5TWBIUoS-Z2Q79eIMtdFrdAnvwlKVqfHngA-3uEfDl5Y 2026-08-08 00:08:31+00:00| published-proof-of-concept| Telegram/zAJ5TWBIUoS-Z2Q79eIMtdFrdAnvwlKVqfHngA-3uEfDl5Y...

CVE-2026-38053

creationtimestamp| type| source ---|---|--- 2026-08-07 10:12:54+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8 2026-08-08 00:17:13+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8...

GHSA-RQFM-PW34-R7J6

creationtimestamp| type| source ---|---|--- 2026-08-07 10:08:45+00:00| published-proof-of-concept| Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE 2026-08-08 01:13:07+00:00| published-proof-of-concept| Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE...

CVE-2026-70559

creationtimestamp| type| source ---|---|--- 2026-08-07 05:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96974 2026-08-07 10:15:04+00:00| published-proof-of-concept| Telegram/WS6QG7O3daDhEGVi670FSZbAHcCdG6YEmYMAs3H7lOdyiY 2026-08-07 16:02:15+00:00| seen|...

CVE-2026-63078

creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:05+00:00| published-proof-of-concept| Telegram/ru6h6eUtKyyYlQBqnI4twQCepjuHjtLl-Bv50A1R6rclxQ 2026-08-07 00:40:12+00:00| published-proof-of-concept| Telegram/ru6h6eUtKyyYlQBqnI4twQCepjuHjtLl-Bv50A1R6rclxQ 2026-08-07 01:00:04+00:00|...