Index

tie01.asp Sep 23

3d579442aa2f6e66691c03da5b240782ad092cd0b86f025546021c35fa66d207 MdTh

99% ASP webshell detected

fyers-api-v3 v3-2.3.0 connect to fyers API Sep 17 javascript

adb6194bf00d1445102fe6b9fbffdbed49a2854726ee5d2eb2d55fb15e5a02cc MdTh

Payload.bat Sep 17

3431a9c4c9d4cf67855d1f50e0d743fef4f1b822d247ba2547d0f07981002c23 ✓ MdTh

99% OR/Download

github.com/Kataglyphis/Kataglyphis-ContainerHub v0.0.0-20260903213355-a7ea09715aea Sep 17 go

1b331101d14cc2c9af21af16ceca0983e45179b1abe07c7ce0a40645182332a2 MdTh

OpenJarvis 1.0.4.dev1126 OpenJarvis — modular AI assistant backend with composable intelligence primitives Sep 17 python

69fa3369373e275a287d523829c28dca392eb70ceadb435bed4b4f0f26d9248b MdTh

2026-09-17_c9a37575f4d70b4f24c331445cf177c4_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch Sep 17

1c3d487ef36f804d71d433585b6efc4635b4f4815e14ae42b5917fbbe4d66486 ✓ MdTh

Win/Gravityrat

github.com/home-assistant/core v0.0.0-20260903234408-917fcadd12b8 Sep 17 go

dcf6768d0acc207e119c461e3a83323cb3008e2ca46c2637a5bad354768e5cbf MdTh

49% legitimate home assistant core

github.com/home-Assistant/core v0.0.0-20260903234408-917fcadd12b8 Sep 17 go

9488a9a52e0d86ffbde6cfce1488dbed1d32e59a9b274a8c0fee313ddeea0c9f MdTh

archive/path-traversal

525b434771cbeb15ad10f3e0caa6b9f8bd2e8eec0c7a4083b4880d59a69fced7 Sep 17

525b434771cbeb15ad10f3e0caa6b9f8bd2e8eec0c7a4083b4880d59a69fced7 ✓ MdTh

github.com/Home-Assistant/Core v0.0.0-20260903234408-917fcadd12b8 Sep 17 go

bead8f92dc28033b75ada070a466dcf87aa9cb05068ffc385c762052a79df3ea MdTh

archive/path-traversal

github.com/Home-Assistant/core v0.0.0-20260903234408-917fcadd12b8 Sep 17 go

9dca62f989ab1722ea7dc76b0a7ef8cbd7789497f6f28f3c46f0d3367a1351b2 MdTh

49% legitimate Home Assistant source

github.com/Azure/IOTEdge v0.0.0-20260831184637-4351227f5578 Sep 17 go

7e401808e432ce354621a3bd5de51ec2c0f4c42c57b8bfcd936201d43ca40011 MdTh

47ec9bd7afb8df5276bd33aaee66ce38a8f6034fc2431ccdc4571dbab766ede1 Sep 17

47ec9bd7afb8df5276bd33aaee66ce38a8f6034fc2431ccdc4571dbab766ede1 ✓ MdTh

agnostic-security 4.45.0 The firewall for AI coding agents — prevents secrets, PII, and credentials from leaking through Copilot, Claude Code, Cursor, and LangChain Sep 17 python

83a772732446f8f4e22534ced7d834b3d86625ed952ac749c293a7392682f3f8 MdTh

2026-09-17_1b6bc3c42a36e0fcd44e10abf084ec42_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch Sep 17

c1feb8d4d9cb9c967f14e7190d8f87167935cac3edcdc4cc4835f7500c15a5ee ✓ MdTh

100% Multiple known malware families

vmactions/freebsd-vm v1.5.6 Sep 17 github

f31571b77bb9114540e1dba67674cacec9e6b8ba9059e1de84c810e569f4929d MdTh

2026-09-17_8d8ac85f9ed998164e52ac9842202dbf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar Sep 17

cee0642708a7be9e5be349c64058869a440710fe49527dd393a9c2bcb99c9f5d ✓ MdTh

99% Multiple malware families, encoded payloads

github.com/signalfx/splunk-otel-collector v0.159.1-0.20260903232059-5b4c9c87f696 Sep 17 go

d572ad13423b81626d91e9f46e5dba22775b08c317099f51deb343eb26ea7a82 MdTh

59% legitimate open-source collector

github.com/azure/agentbaker v0.0.0-20260903233000-9f93a4da93e4 Sep 17 go

7e6dab928a2db453a453a883c6d09adaafe8881e3d3f72bbf8cfb2a56d1b6f35 MdTh

github.com/azure/agentbaker v0.0.0-20260903232814-3770a520ec8b Sep 17 go

d918cebdd54d3ff278426eef58aa03c78854ee91898c0c68a1a7a118fbe182a1 MdTh

raya 2.0.2 Rust-native malware detection and binary pattern-matching engine 77 installs Sep 17 rust

afdde51bd86469010aab752204573e5fe9177e8524a57f784d60e71307753feb MdTh

@lovrabet/sdk 1.5.3 Sep 17 javascript

18cc2b0d6c99e8768777b005d826281fcd6d5103ba55882d975b7e6f90412050 MdTh

856c3a417aa67ff78c52d644d0d64c91515c737ef7508c6055cec79152ee5007 Sep 17

856c3a417aa67ff78c52d644d0d64c91515c737ef7508c6055cec79152ee5007 ✓ MdTh

67% XOR-encoded browser strings

@anonympins/fingerprint 0.6.3 Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof… Sep 17 javascript

ab47e6b674bdbfb5ceade0f7fe43a8fbdcb53ac01499f733077688519e381827 MdTh

github.com/home-Assistant/core v0.0.0-20260903231835-26a5ec1efab4 Sep 17 go

feb965f6432c690c63eeb424a16c440a27ba06ddc6afe474b653997518c04aea MdTh

49% legitimate Home Assistant source

github.com/signalfx/splunk-otel-collector v0.0.0-20260903232059-5b4c9c87f696 Sep 17 go

95e90a122155061c54dc54a763649804b3604dd55b9faa701f1f43e6fca7c458 MdTh

Exploitations/Jul20

github.com/bigb00st/ctf-solutions v0.0.0-20200928102342-7c1b43f086e2 Sep 17 go

e667a7aa01b56884b5a55b0229b2bfe696ca9cf9c3be63800e911e45b9d4e597 MdTh

63% CTF solutions repository

banyancode-windows-x64-baseline 26.9.6 Sep 17 javascript

0692a24d663c0b3c81d5a562d87e0f811f9743e4e7e65e59c21d45cd2d816756 MdTh

92% Embedded PE in Bun binary

@alltomatos/opencode-windows-x64-baseline 1.21.25 Sep 17 javascript

fac000c8929366b90745820cdba5078a8bcedb3e80bc077f1401b34eaf199739 MdTh

EXE/Telegramchatbot

pkg:npm/[email protected] Sep 17 npm

1282534676341b23cf61931145559860abbc5fad05d1955e2a67e3b5461258fc MdTh

pkg:npm/[email protected] Sep 17 npm

85ba1836a6f41d1df91d794b4d0ebf9f3786d7c3f60eb03b1de0aa38a6a02dbf MdTh

pkg:npm/[email protected] Sep 17 npm

8470f958771bdd158f54c61acfb3822aadebae8d336fbfc48ec9977fa8300e0f MdTh

2026-09-17_89752f51cf22021e8feeb6de24b763f8_amadey_coinminer_cryptolocker_elex_glassworm_kwampirs_remcos_smoke-loader_stealc_stop_tofsee Sep 17

c64e52fa65b3cea0333c79f80db2da7a9bda4f8fab3a4898f36dd371dfb59140 ✓ MdTh

100% Multiple malware families, embedded PE

github.com/footprintai/containarium v0.71.0 Sep 17 go

8150f2af0ad0049b99a0bf67a12d1533a1089dda1ec362625f148dfd7f43207d MdTh

2026-09-16_5e67577f56cb04881d2b1321e770b747_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_vidar Sep 17

b9218fff68a8f5fc999f2de96fc788fb05ff669e8b6cfbfa7f2b72cddd50a928 ✓ MdTh

99% Named known malware families

2026-09-16_595318b0c84a34f9ce53c90da95f2b5d_elex_wannacry Sep 17

a5d0bc6d47b9119b92af00d3d94940bd41087fcb538a46472196839d259f767e ✓ MdTh

github.com/deftai/directive v0.111.1-0.20260903195824-f57e592c80bf Sep 16 go

1cca45bcbfbfd6fca495b67e27e3339fcf8165f5ccb57ee7bf8e7a0b1f13a508 MdTh

OR/Download

supq.exe Sep 16

a6208b571ca4e75efb12ab591122540ebcf9dd071be7fcdbbdfe2c787521ff7b ✓ MdTh

Data/Store

10b55876b694b625abb1dd0e959d2fc04106fcb4467eb8e99af4b609d0da2560 Sep 16

10b55876b694b625abb1dd0e959d2fc04106fcb4467eb8e99af4b609d0da2560 ✓ MdTh

99% Mozilla/Oct19malformed/elf-header

mesa 26.2.3 Graphics Library Sep 16 macos

1628058a8d2c0615975de5a15ab7bbb9638c50000b5bed9456ff423ea034a81f MdTh

40% Legitimate open-source graphics library

@unclick/mcp-server 0.3.132 UnClick gives MCP-compatible agents 667 customer-visible apps and 1588 actions, plus persistent cross-session memory. Sep 16 javascript

676ab1f3a92601b839c86cdafd23e59ae4f8a61eee3dbffa45e610cce920f725 MdTh

pkg:golang/k8s.io/[email protected] Sep 16 go

cf2b3f06a21551abc5b0e5c078edd615fcb67026eaf8374bd13441fcf48d082e MdTh

2026-09-16_bd238b13ffa8c51985c28ff71eb83f45_amadey_coinminer_cryptolocker_elex_glassworm_kwampirs_remcos_smoke-loader_stealc_stop_tofsee Sep 16

df7c25c2ee901202c688621fe3afbe27d82745116fc976f175aa206459b45b17 ✓ MdTh

Cryptolocker/Set1Cryptolocker/Rule2

@lethevimlet/sshift 1.7.9 Web-based SSH + SFTP terminal client with tabs and bookmarks Sep 16 javascript

97e0a98b3d01163981ff20dd810d566a77ddb55bcad139f6d1095fe6eb484b72 MdTh

k8s.io/kubernetes v0.0.0-20260903223419-31f2745a9ee2 Sep 16 go

57b92f92a02a48fa56426527776a801f5e145dd058f88e0b28679f493dfc3485 MdTh

knot 1.9.8 Codebase Graph + Vector RAG Indexer for Java, TypeScript, JavaScript, Kotlin, Rust, Python, Groovy, C/C++, C#, Build Systems, and HTML/CSS… 1,764 installs Sep 16 rust

f2fe579fb4c7bbe74eadd1498cd1fc840f41679af85bca84410b4af3a7ed9fdd MdTh

Exec/Apr24

2026-09-16_b0840e0e9c3b2a199a3c5adeafd4c26c_coinminer_glassworm_poet-rat_sliver_snatch Sep 16

688788b90f7ee630da3d20e9d82bb3b7c530529db6bdd1a124f5dd9b0cd00036 ✓ MdTh

Win/Gravityrat

github.com/Sajjadium/ctf-writeups v0.0.0-20230506061513-1fed8bd75274 Sep 16 go

2a3812c9a4f88a32db771b0aeef9cc64bebc5ed00f5ea71fd583c4abfa928f96 MdTh

PHP/Generic

@dotenvx/dotenvx-windows-x86_64 64-2.28.0 dotenvx-windows-x86_64 binary Sep 16 javascript

c25df0b512435e348025d6a12255bf4af4a377e3282a49483ad0e2333a6870e7 MdTh

@dotenvx/dotenvx-windows-amd64 2.28.0 dotenvx-windows-amd64 binary Sep 16 javascript

0341967ed1198fda0a7b5d84576f3bbe0e924d84b5f197954f71fc63519c737e MdTh

github.com/vamseeachanta/workspace-hub v0.0.0-20260903182800-65ece5e69103 Sep 16 go

80935b14b4d9b02e03539adc4a6165c5aa830fffa966ec92dd123a2d029f3a45 MdTh

2026-09-16_2d4528a98f0720674d60d0c4837a41c9_amadey_coinminer_elex_floxif_smoke-loader_stop_vidar Sep 16

9ff6349f5578528df103e33901f0316dd096f8a01d272cc28e645cfc87391c18 ✓ MdTh

99% Known malware family, embedded PE

github.com/openai/codex v0.0.0-20260903222248-280ae8b9fcd3 Sep 16 go

dcc62bfcf670e7b448fd5e7708d9278ec70d1bd28dad929581ec3fc842ca604e MdTh

litellm 1.102.0rc2 Library to easily interface with LLM API providers Sep 16 python

2550e5b407592a6bba961933df931a1ec7b0efafb6afb9c62fceb740733ec403 ✓ MdTh

Legitimate package, false positives

3210e85897ab370c889b203224d906ddd5e8b1e997e5f61799b2da15b45e3e23 Sep 16

3210e85897ab370c889b203224d906ddd5e8b1e997e5f61799b2da15b45e3e23 ✓ MdTh

100% XOR-encoded malicious payload

Backdoor.Win32.Frauder.lz Sep 15

96b48a6dd6d49d730e6740224e380171220f985bf549f53ba559606f94f3846a MdTh

GIF/Anomalies

0c34df6d8c37a53aecf9c04517a319ad4e0eb2f03a5527c8bf9144c09251a7eb.unknown Sep 15

0c34df6d8c37a53aecf9c04517a319ad4e0eb2f03a5527c8bf9144c09251a7eb MdTh

95% GIF with appended data, format anomalies

db648b7ef68a101713ea8add6a0d0e97773d06c8ca5170e0b0c48ce08da8fafc.unknown Sep 14

db648b7ef68a101713ea8add6a0d0e97773d06c8ca5170e0b0c48ce08da8fafc MdTh

99% GIF header with appended data

b38d6c7993c9c511c190c987477650a54a62a69cc634c7d21eaa542282ef8234.unknown Sep 14

b38d6c7993c9c511c190c987477650a54a62a69cc634c7d21eaa542282ef8234 MdTh

98% GIF header with appended data

2026-09-13_27e00fa45193d96d3585729cb5e0b0fe_elex_floxif_glassworm_stop Sep 14

86e1775272790e69550bc40dfb27117ce3eae6d7e933ec760c9509d8d81756ff ✓ MdTh

100% Floxif virus detection

eee705f46e5309fe46a17ecc08278afbb5c195b5bdae025aa97ee18a35c348d7.unknown Sep 14

eee705f46e5309fe46a17ecc08278afbb5c195b5bdae025aa97ee18a35c348d7 ✓ MdTh

99% GIF header with appended data

497F9C688ED142AE91E354B3D9C9E13243A268B0 Sep 14

163eda7f8382b3981e23d81318505806260d2657ca3cd9d7e0995299a5647318 MdTh

98% GIF header with appended data

2026-09-13_4b89049fd5f8229ee412fd1c366392bc_elex_wannacry Sep 14

0d8f91214786f3fa0dc43e6ac66a4ffa12ae243bf36d406a233422819f3bdc7c ✓ MdTh

33% WannaCry ransomware variant

2026-09-13_a9903c34138a6dba8537e57b6b79e13e_elex_wannacry Sep 13

cc37dc088d5c579fab6e22eb3d263061e08eb9383c7696eba522bc637033d108 ✓ MdTh

33% WannaCry ransomware signature

HackTool.PHP.Botctl.a Sep 12

31b0a03f911a547095cc722dbeb7f745d6827e2388e183d87ea9b2f18baa8b6c MdTh

94% PHP webshell with encoded payload

Virus.Win32.Expiro.c Sep 12

30e6dd43d727b94a5356540daae1318950d114c9d459e10722adf21efada1d17 MdTh

Backdoor.Win32.Kbot.fj Sep 12

b7cf9a60c2f918b07a4e76eed0736852acfc3a4fb84dbadf654f41f244e97c26 MdTh

100% Kbot backdoor with encoded payloads

Backdoor.Win32.VB.esp Sep 12

73236264f883432ba89f43d7056ff3dfad190ba41bddf03796ea464c045c2290 MdTh

Base64/EXE

Backdoor.Win32.Hupigon.bxli Sep 12

a13e09790fc8489c3522253e96a04a339e05810eeb4e6c9b6c8fb4b19855d433 MdTh

Backdoor.Win32.Protux.bk Sep 12

08a202521e04df66bafa2cca1c0b1b72fb1601b32c9f09385fc2e4f4a73c7a9e MdTh

packer/upxupx/tool-missing

Backdoor.Win32.Agent.wjl Sep 12

2e94fdccef3d23d9f285ce72f77428fbfe5fafb7182a06c09fefc1e777083847 MdTh

100% Named backdoor, malware signature match

Backdoor.Win32.Kbot.fm Sep 12

346f8f8f06942b9a1271fde437fbff96c3e7a6f5d962b84fb59934006bc5f299 MdTh

100% Kbot backdoor with encoded payload

Backdoor.Win32.IRCBot.vu Sep 12

b85e39689cc8ccc52565dc668812685811eafb7452311f6d041c3d6a5689bfbe MdTh

100% Named IRC bot backdoor

Backdoor.Win32.VB.hon Sep 12

62cada136c266ef3d2144bf35cd1c7515433df266d47aecf0414452b3dbdf4d0 MdTh

Backdoor.Win32.Bandok.dz Sep 12

f156f35aa57a0c13f3040724e16c4f932cbee5bc682fff542e80d016759fad8c MdTh

100% Known Bandook RAT backdoor

Backdoor.Win32.RsCrt.c Sep 12

02c9190ac84272afdc52ce3aaa1c924028f0619f042b2b5cb747d07faf9b93b4 MdTh

Backdoor.Win32.Poison.bd Sep 12

e70cda2164ea1b49d45e13317cb5b6fc05dccf48d35dbb253fece313371e504b MdTh

Backdoor.Win32.Qmop.c Sep 12

bcf26bd5579242cf5a6970d1983d406c67c392447b741971c4f853b461147a46 MdTh

Backdoor.Win32.SdBot.bnh Sep 12

7182673fd07b1c480dfca8a2830ea8b092aa478d32c877958dbaf54632312bc1 MdTh

Backdoor.Win32.Small.gaa Sep 12

f2affbd7248563927ee8cde6477e2421b3b9a348d4cb9cdfaf8b429fb8419ad2 MdTh

Backdoor.Win32.RsCrt.b Sep 12

a4d062b5345010e62c07a967bf1c05db81b173c2037e72d707033510bf588909 MdTh

Worm.Win32.Socks.by Sep 12

c18a1c8da0291db216535eae9e36367cc1e2a31380b37d27f0b2febbb02648c9 MdTh

Worm.Win32.AutoRun.ene Sep 12

c0ea744eaeb5132d0ebeaf4099bbb2fd1d20cbd8f09ef123e67123131cb3f6d1 MdTh

Flystudio/May18

Worm.Win32.Socks.agv Sep 12

90a2716d7d01afd055bb8f83f13fcd5e7da3950653d699cd202f0f7b2221fe94 MdTh

Trojan-Banker.Win32.Banker.gwg Sep 12

af79512dad693e0394de57770a86adac75ca5bf0f68f52ce51d928110df9038c MdTh

33% Banker trojan with encoded URLs

Rootkit.Win32.Agent.xi Sep 12

28485095db7ccc9fb61f6d9c57b0e9a3ff60008fafe4aad791af89afea2348c6 MdTh

Trojan-PSW.Win32.QQPass.ws Sep 12

87848982070ca5c0522e637819f51e6ee788080c70e2a8ee6515a3ccb31c8a7c MdTh

Trojan-PSW.Win32.PdPinch.gip Sep 12

8799819b39d84260caf0cb2cc2be05a25374dfd7a038e8427d7f80107f413827 MdTh

Trojan-PSW.Win32.Nilage.axr Sep 12

89e5a46030b22f3adee7f4d8208be406022670b70219d2c2d01706712890b9ab MdTh

Trojan-PSW.Win32.Element.ab Sep 12

9207ec8ae3c2329fa21a0f3492724872bc6f9cb6207029b73ef4962da87902de MdTh

Trojan-PSW.Win32.Delf.aed Sep 12

f66f1ad2ada66132ed3791e9f2d33fa0e20c93b1175798da19e5e61bc47c2df8 MdTh

Trojan-PSW.Win32.Delf.nh Sep 12

2c873f2dae5c1acdb5601814f8943442737032fafc70971123745cbd06b1440d MdTh

Trojan-PSW.Win32.Element.ao Sep 12

884d839a180aba8e45b530ce0fcbe67fa5a6a494f962ae4d4eacf8e8c95fe58c MdTh

Trojan-PSW.Win32.OnLineGames.anzr Sep 12

7858d2a24d8e026bb2c1049f986be815fbb146598dbc865c60127be120984bf5 MdTh

Trojan-PSW.Win32.LdPinch.cu Sep 12

e3e68d412fb335778af8b7ab7e4b8cfaecafa264f00aef2a7c7bd7e9ffe92dbb MdTh

Trojan-PSW.Win32.Delf.jw Sep 12

600967cc912ec5010266eca834d2fb4356334ce237f7b39a47a1f1e2b9e8e6f6 MdTh

Trojan-PSW.Win32.OnLineGames.aliz Sep 12

2e99db8558fb58dd759c281a53ff76209c26507f3d206cd82abd859b12ab6466 MdTh

Trojan-PSW.Win32.OnLineGames.alce Sep 12

a6b404cce176019022c9122b7135618cb761b876d136e8fca50e354365328757 MdTh

Trojan-PSW.Win32.OnLineGames.lc Sep 12

470bb8520b95bd912dc902ca797ace21a8691e6fcfadda608f7e6c4bb66e4e97 MdTh

Trojan-PSW.Win32.Delf.kg Sep 12

69894fa150f3bcf4ca9de2af271cf0bd433f69423a57251239de75ecbb81ddd3 MdTh