CVE-2025-30374

creationtimestamp| type| source ---|---|--- 2026-08-07 10:17:15+00:00| seen| Telegram/zAJ5TWBIUoS-Z2Q79eIMtdFrdAnvwlKVqfHngA-3uEfDl5Y 2026-08-08 00:08:31+00:00| published-proof-of-concept| Telegram/zAJ5TWBIUoS-Z2Q79eIMtdFrdAnvwlKVqfHngA-3uEfDl5Y...

CVE-2026-38053

creationtimestamp| type| source ---|---|--- 2026-08-07 10:12:54+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8 2026-08-08 00:17:13+00:00| published-proof-of-concept| Telegram/cr6l50opWOBaeLyWntUIu5BxD85N7mmykPrPwEONJj0b8...

GHSA-RQFM-PW34-R7J6

creationtimestamp| type| source ---|---|--- 2026-08-07 10:08:45+00:00| published-proof-of-concept| Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE 2026-08-08 01:13:07+00:00| published-proof-of-concept| Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE...

CVE-2026-70559

creationtimestamp| type| source ---|---|--- 2026-08-07 05:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96974 2026-08-07 10:15:04+00:00| published-proof-of-concept| Telegram/WS6QG7O3daDhEGVi670FSZbAHcCdG6YEmYMAs3H7lOdyiY 2026-08-07 16:02:15+00:00| seen|...

Exploit for CVE-2026-70559

CVE-2026-70559...

MAL-2026-13413 Malicious code in @astralcore/aura-wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4a1b22725e981c18c44de0f81915a5048b58bdcacfe6935c9dfcb3dceb641c The package is a WhatsApp Baileys bot whose default configuration in config/index.js points MONGODBURI at a hardcoded shared Atlas cluster...

Malicious code in @astralcore/aura-wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4a1b22725e981c18c44de0f81915a5048b58bdcacfe6935c9dfcb3dceb641c The package is a WhatsApp Baileys bot whose default configuration in config/index.js points MONGODBURI at a hardcoded shared Atlas cluster...

CVE-2026-63078

creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:05+00:00| published-proof-of-concept| Telegram/ru6h6eUtKyyYlQBqnI4twQCepjuHjtLl-Bv50A1R6rclxQ 2026-08-07 00:40:12+00:00| published-proof-of-concept| Telegram/ru6h6eUtKyyYlQBqnI4twQCepjuHjtLl-Bv50A1R6rclxQ 2026-08-07 01:00:04+00:00|...

CVE-2026-71211

creationtimestamp| type| source ---|---|--- 2026-08-05 22:00:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96814 2026-08-06 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96814 2026-08-07 10:17:15+00:00| seen|...

CVE-2026-68004

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/lFoBJsBJrsgLmESCPhvSqV0oex82MROWaDEk0EpTuUjmgWw 2026-08-06 00:00:09+00:00| published-proof-of-concept| Telegram/lFoBJsBJrsgLmESCPhvSqV0oex82MROWaDEk0EpTuUjmgWw 2026-08-18 20:10:04+00:00| seen|...

CVE-2026-15430

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/MD75k-cDFtv9LnjecJEQAz4SDttk4ZkvpNpcWsPC7HMdiM 2026-08-05 21:00:03+00:00| seen| Telegram/6p3PAYOSat3nZO9NlFWMr5GgoKupNTDZqtKSi9BnUGK1nd4 2026-08-06 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-98198

creationtimestamp| type| source ---|---|--- 2026-08-05 19:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-06 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-07 10:17:15+00:00| seen|...

Malicious code in solana-sniper-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1140920c05a1ce00ca8d35295fb927d1bbb2ca9fe2f8e7ab9f63f9391ca6476b During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

MAL-2026-13361 Malicious code in defi-sdk-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b292686db581afeaaa7d53e2281a90d7d470fc71ab9e7d6156c49e2e99a44a30 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

Malicious code in defi-sdk-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b292686db581afeaaa7d53e2281a90d7d470fc71ab9e7d6156c49e2e99a44a30 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

MAL-2026-13362 Malicious code in mnemonic-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6599d6208d71e0e809661e86bf5641e6e7b871cd6f01a54abf22215b8a88ef11 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

Malicious code in mnemonic-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6599d6208d71e0e809661e86bf5641e6e7b871cd6f01a54abf22215b8a88ef11 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

CVE-2026-20200

creationtimestamp| type| source ---|---|--- 2026-08-05 17:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 10:50:29+00:00| seen|...

Malicious code in @astralcore/sl-aura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233 This WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to t...

MAL-2026-13355 Malicious code in @astralcore/sl-aura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233 This WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to t...