Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 18 threats · Friday, Sep 11· last check 2026-11-04 10:57 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Friday, Sep 11

Most severe in everything

EXPLOITED IN THE WILD

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9,…GitLab Community Edition and Enterprise Edition

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in platform-telemetry-client (PyPI)platform-telemetry-client

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in langgrap (PyPI)langgrap

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in transfomers (PyPI)transfomers

Friday, Sep 11

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in platform-telemetry-client (PyPI)platform-telemetry-clientPackage2026-09-11 23:41 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in langgrap (PyPI)langgrapPackage2026-09-11 21:00 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in transfomers (PyPI)transfomersPackage2026-09-11 21:00 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in ollamaa (PyPI)ollamaaPackage2026-09-11 20:59 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in openaii (PyPI)openaiiPackage2026-09-11 20:59 UTCby osv-malicious–UNINSTALL MEDIUM6.7Kiro IDE: agent-written workspace settings leak project data to outside URLamazon kiro ideAI agents & MCP2026-09-11 20:19 UTCby EPSS–FIX 0.8.135 HIGH8.2AWS SDK for Go v2: malformed event stream frame crashes host processPackage2026-04-07 21:01 UTCby EPSS–WHAT TO DO MEDIUM6.0AWS JDBC Wrapper: XML external entities let cached data read local filesamazon advanced jdbc wrapperPackage2026-09-11 16:34 UTCby EPSS–FIX 4.3.0 HIGH8.4projen: shell metacharacters in project config run commands on developer machinesPackage2026-09-11 16:06 UTCby EPSS–WHAT TO DO HIGH7.1projen: crafted manifest entries let project sync delete files outside the repoPackage2026-09-11 16:06 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in aitextutils-py (PyPI)aitextutils-pyPackage2026-09-11 15:24 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in aitextkit-py (PyPI)aitextkit-pyPackage2026-09-11 15:22 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pymem-win (PyPI)pymem-winPackage2026-09-11 14:47 UTCby osv-malicious–UNINSTALL HIGHINCIDENTAnthropic: Elevated errors for Claude Mythos 5.1 and Claude Fable 5.1AnthropicVendor2026-09-11 14:19 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in eth-account-web3 (PyPI)eth-account-web3Package2026-09-11 14:15 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in web3-eth-account (PyPI)web3-eth-accountPackage2026-09-11 14:12 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTMongoDB Atlas: Atlas is experiencing issues with issuing certificates from Lets EncryptMongoDB AtlasVendor2026-09-11 01:28 UTCby status page–WHAT TO DO CRITICAL10.0EXPLOITEDGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9,…GitLab Community Edition and Enterprise EditionVendor2026-09-11by InfraStack Analyst–FIX 18.11.12

Thursday, Sep 10Friday, Sep 11Saturday, Sep 12