Tag: 2026-06-07

1 Attack Reports | 20 Vulnerabilities

Attack reports

Miasma Worm Campaign Spreads with New PyPI Wave

A coordinated PyPI compromise campaign involving 37 malicious wheel artifacts across 19 packages was detected, utilizing Python startup hooks to execute credential-stealing payloads. The attack leverages .pth files for automatic execution during Python interpreter startup, downloads the Bun JavaScr…
credential theft
pypi
supply chain attack
hades
github exfiltration
mini shai-hulud
2026-06-07
bioinformatics
bun runtime
miasma
startup hooks
Published: June 7, 2026
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-49494

8.7
    Comodo
  • Internet Security
Published: June 7, 2026

CVE-2026-11450

6.9
    Gl.Inet
  • Gl-Mt3000
Published: June 7, 2026

CVE-2026-11451

6.9
    Gl.Inet
  • Gl-Mt3000
Published: June 7, 2026

CVE-2026-11452

6.9
    Gl.Inet
  • Gl-Mt3000
Published: June 7, 2026

CVE-2026-11456

5.5
    Chanjet
  • Chanjet Crm
Published: June 7, 2026

CVE-2026-11457

5.5
    Erzhongxmu
  • Jeewms
Published: June 7, 2026

CVE-2026-11458

5.5
    Erzhongxmu
  • Jeewms
Published: June 7, 2026

CVE-2026-11462

5.5
    Chengdu Everbrite Network Technology
  • Beikeshop
  • Stripe Plugin
Published: June 7, 2026

CVE-2026-11449

5.3
    Glinet
  • Gl-Mt3000
Published: June 7, 2026

CVE-2026-11448

5.1
    Gl.Inet
  • Gl-Mt3000
Published: June 7, 2026

CVE-2026-11460

2.9
    Boost
  • Serialization
Published: June 7, 2026

CVE-2026-11463

2.9
    Usciblab
  • Cereal
Published: June 7, 2026

CVE-2026-11447

2.1
    Gl.Inet
  • Gl-Mt3000
Published: June 7, 2026

CVE-2026-11453

2.1
    Tiobon
  • Employee Self Service System
Published: June 7, 2026

CVE-2026-11461

2.1
    Nousresearch
  • Hermes-Agent
Published: June 7, 2026

CVE-2026-11466

2.1
    Zilliztech
  • Deep-Searcher
Published: June 7, 2026

CVE-2026-11459

1.9
    Secureage
  • Catchpulse
Published: June 7, 2026

CVE-2026-11455

1.3
    Foundationagents
  • Metagpt
Published: June 7, 2026

CVE-2026-11464

1.3
    Jeecg
  • Jeecgboot
Published: June 7, 2026

CVE-2026-11465

1.3
    Songquanpeng
  • One-Api
Published: June 7, 2026
Click here to see more Vulnerabilities