https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 04 Sep 2026 18:29:50 +0000 https://vulnerability.circl.lu/sighting/7c559ecd-4638-4730-b068-4e19d5bcb1d0/export {"uuid": "7c559ecd-4638-4730-b068-4e19d5bcb1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-23T00:00:42.267752Z"} {"uuid": "7c559ecd-4638-4730-b068-4e19d5bcb1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-23T00:00:42.267752Z"} https://vulnerability.circl.lu/sighting/7c559ecd-4638-4730-b068-4e19d5bcb1d0/export Sun, 23 Aug 2026 00:00:42 +0000 https://vulnerability.circl.lu/sighting/a63e308e-45ee-4ea6-87b9-e24a9a237ed0/export {"uuid": "a63e308e-45ee-4ea6-87b9-e24a9a237ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-22T00:00:27.072956Z"} {"uuid": "a63e308e-45ee-4ea6-87b9-e24a9a237ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-22T00:00:27.072956Z"} https://vulnerability.circl.lu/sighting/a63e308e-45ee-4ea6-87b9-e24a9a237ed0/export Sat, 22 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/a2c0927a-b506-44d1-aae3-0b10a8a1fd45/export {"uuid": "a2c0927a-b506-44d1-aae3-0b10a8a1fd45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-21T23:00:10.700377Z"} {"uuid": "a2c0927a-b506-44d1-aae3-0b10a8a1fd45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-21T23:00:10.700377Z"} https://vulnerability.circl.lu/sighting/a2c0927a-b506-44d1-aae3-0b10a8a1fd45/export Fri, 21 Aug 2026 23:00:10 +0000