https://vulnerability.circl.lu/sightings/feed 2026-09-04T18:29:49.760440+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7c559ecd-4638-4730-b068-4e19d5bcb1d0/export 2026-09-04T18:29:49.776513+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7c559ecd-4638-4730-b068-4e19d5bcb1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-23T00:00:42.267752Z"} 2026-08-23T00:00:42.267752+00:00 https://vulnerability.circl.lu/sighting/a63e308e-45ee-4ea6-87b9-e24a9a237ed0/export 2026-09-04T18:29:49.778820+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a63e308e-45ee-4ea6-87b9-e24a9a237ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-22T00:00:27.072956Z"} 2026-08-22T00:00:27.072956+00:00 https://vulnerability.circl.lu/sighting/a2c0927a-b506-44d1-aae3-0b10a8a1fd45/export 2026-09-04T18:29:49.779010+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2c0927a-b506-44d1-aae3-0b10a8a1fd45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-21T23:00:10.700377Z"} 2026-08-21T23:00:10.700377+00:00