Threats Tagged 'mal-2026-13520'
View all threats tagged with 'mal-2026-13520'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-13520'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in @aster110/cc2wechat (npm) 0 The @aster110/cc2wechat npm package version 5.1.0 runs a daemon that polls Tencent's iLink Bot API for WeChat messages and forwards them to a locally hosted AI agent with all safety and sandbox restrictions disabled. This setup allows any sender of a WeChat message to execute arbitrary shell and filesystem commands on the host machine running the daemon. The remote shell capability activates only when the daemon is started via the CLI, not during installation or import. Join the discussion | GCVE Database | 08/07/2026, 12:43:35 UTC Added: 08/07/2026, 15:17:29 UTC |
Showing 1 to 1 of 1 result