Live· 14 threats · Wednesday, Aug 26· last check 2026-11-04 12:15 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Wednesday, Aug 26

Most severe in everything

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in pybitjs (PyPI)pybitjs

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in trongridet (PyPI)trongridet

CRITICALNO CVE YET

GitHub: Incident with ActionsGitHub

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in @worrisome/reutil (npm)@worrisome/reutil

Wednesday, Aug 26

MEDIUMINCIDENTGitHub: Disruption with GitHub BillingGitHubVendor2026-08-26 23:37 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Incident with Actions and Pull RequestsGitHubVendor2026-08-26 22:56 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pybitjs (PyPI)pybitjsPackage2026-08-26 19:21 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in trongridet (PyPI)trongridetPackage2026-08-26 19:13 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTSentry: Issues performance is degraded in the USSentryVendor2026-08-26 16:17 UTCby status page–WHAT TO DO MEDIUMINCIDENTCircleCI: Intermittent errors when viewing plan usage UIs or calling plan usage APIsCircleCIVendor2026-08-26 15:43 UTCby status page–WHAT TO DO HIGH8.5SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe EmbedsuneditorPackage2026-06-20 13:59 UTCby EPSS–FIX 3.1.4 CRITICALINCIDENTGitHub: Incident with ActionsGitHubVendor2026-08-26 15:11 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Disruption with some GitHub servicesGitHubVendor2026-08-26 15:09 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @worrisome/reutil (npm)@worrisome/reutilPackage2026-08-26 14:55 UTCby osv-malicious–UNINSTALL HIGH7.4IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entriesorg.codehaus.izpack:izpack-installerPackage2026-08-26 14:24 UTCby EPSS–FIX 5.2.7 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in 0xfighter3 (PyPI)0xfighter3Package2026-08-26 07:16 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bigquery-agent-analytics-tracing (PyPI)bigquery-agent-analytics-tracingPackage2026-08-26 06:19 UTCby osv-malicious–UNINSTALL HIGHINCIDENTVercel: Failures logging in with Vercel CLIVercelVendor2026-08-26 03:06 UTCby status page–WHAT TO DO