Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 14 threats · Thursday, Sep 17· last check 2026-11-04 10:26 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Thursday, Sep 17

Most severe in everything

AWS IoT Device SDK for Python: certificate hostname not checked, enabling impersonation

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in requests-auroras (PyPI)requests-auroras

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in requests-triwes (PyPI)requests-triwes

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in requests-asetwe (PyPI)requests-asetwe

Thursday, Sep 17

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in requests-auroras (PyPI)requests-aurorasPackage2026-09-17 23:53 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in requests-triwes (PyPI)requests-triwesPackage2026-09-17 23:07 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in requests-asetwe (PyPI)requests-asetwePackage2026-09-17 22:07 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in index-forum (PyPI)index-forumPackage2026-09-17 22:00 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pyjstat-smooth (PyPI)pyjstat-smoothPackage2026-09-17 21:46 UTCby osv-malicious–UNINSTALL MEDIUM6.5Vulnerabilities in handler/placeholder layer in github.com/caddyserver/caddygithub.com/caddyserver/caddy/v2Runtime2026-07-10 15:22 UTCby EPSS–FIX 2.11.4 MEDIUMINCIDENTGitHub: Elevated rate of errors for OpenAI models provided by CopilotGitHubVendor2026-09-17 20:59 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwindcss-form-utils (npm)tailwindcss-form-utilsPackage2026-09-17 19:51 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in aiosendletter (PyPI)aiosendletterPackage2026-09-17 19:40 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwindcss-contact-form (npm)tailwindcss-contact-formPackage2026-09-17 14:16 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in marketing-mcp (PyPI)marketing-mcpPackage2026-09-17 12:43 UTCby osv-malicious–UNINSTALL LOWINCIDENTVercel: Failures delivering Logs to DrainsVercelVendor2026-09-17 05:11 UTCby status page–WHAT TO DO CRITICAL9.2AWS IoT Device SDK for Python: certificate hostname not checked, enabling impersonationPackage2026-09-17by EPSS–WHAT TO DO HIGHNOT SCOREDCVE-2026-92943 - Improper validation of certificate with host mismatch in AWS IoT Device SDK for PythonPackage2026-09-17by Vendor & lab pages–WHAT TO DO

Wednesday, Sep 16Thursday, Sep 17Friday, Sep 18