VDB

GCVE-VVD-OSM-2026-731

GCVE-VVD-OSM-2026-731
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published March 1, 2026
This package targets Discord bot developers using Replit, who would have bot tokens in their settings.json files Payload: BotBooster/__init__.py Key findings: The init.py file reads sensitive data by opening settings.json and extracting the TOKEN field (BotBooster-0.0.3/init.py:11-18). It then exfiltrates the token: Sends the stolen Discord bot token to an attacker-controlled Discord webhook (BotBooster-0.0.3/init.py:19-20). Covers tracks: In version 0.0.1, it even sends a fake success message to the user: "bot is now boosted!" to make them think it worked legitimately IOCs: - discordWebhooks: https://discord.com/api/webhooks/894416668065947688/yeCk4Jefhb0DBc-VTM5Tw6ZtcU_KJfVTnWKEsB8kNzVEONDfcZAQl8vPuxUGeoZW8SCi - payloadFileHash: 49b48d767adf9224da164b16b5fe1697cecf3ac5a2556d6ae282b951d55295d0
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownbotboosterall (affected)—

Aliases

MAL-2026-1097

Transitive aliases

VVD-OSM-2026-50VVD-OSM-2026-544GHSA-9cwp-m29q-hmgrVVD-OSM-2026-696GHSA-jmx7-4g26-qp86GHSA-xqxf-c9jr-8wx6VVD-OSM-2026-219VVD-OSM-2026-646MAL-2026-2197VVD-OSM-2026-618VVD-OSM-2026-87GHSA-mg5x-ww4x-j322VVD-OSM-2026-601MAL-2026-2174MAL-2026-1263VVD-OSM-2026-159GHSA-p5gg-75q6-vp64MAL-2026-2184VVD-OSM-2026-592GHSA-cv8h-5j9m-x3rcVVD-OSM-2026-639VVD-OSM-2026-642MAL-2026-1987VVD-OSM-2026-236VVD-OSM-2026-156VVD-OSM-2026-235GHSA-f6pq-884h-rjxqMAL-2026-1225VVD-OSM-2026-732MAL-2026-2236MAL-2026-2003GHSA-c5x7-f6qj-gc77MAL-2026-2092MAL-2026-1295GHSA-7fr9-gw6v-q3mwMAL-2026-1084MAL-2026-1996GHSA-p427-hrfp-pc52GHSA-f46r-3xg5-w2wmMAL-2026-2105GHSA-vf6p-p33f-3cjvVVD-OSM-2026-726GHSA-2phg-9x97-9759VVD-OSM-2026-727VVD-OSM-2026-153MAL-2026-1581MAL-2026-1931VVD-OSM-2026-725VVD-OSM-2026-190VVD-OSM-2026-123MAL-2026-1575MAL-2026-1945VVD-OSM-2026-561MAL-2026-1480GHSA-mgm3-4q53-38p5GHSA-7w6q-gfxv-393vVVD-OSM-2026-51VVD-OSM-2026-243MAL-2026-2011MAL-2026-1975VVD-OSM-2026-612GHSA-qxf6-x9c5-qxr4MAL-2026-1276VVD-OSM-2026-35VVD-OSM-2026-547VVD-OSM-2026-188MAL-2026-2226VVD-OSM-2026-626VVD-OSM-2026-589VVD-OSM-2026-644VVD-OSM-2026-118MAL-2026-2104GHSA-9jg5-g7r5-p9f9GHSA-7qv7-jx74-qhx9VVD-OSM-2026-170MAL-2026-1577VVD-OSM-2026-700GHSA-gphq-fq72-qxwrMAL-2026-2077MAL-2026-1559MAL-2026-1935VVD-OSM-2026-571VVD-OSM-2026-91GHSA-6jcw-rcqg-wmmfVVD-OSM-2026-240MAL-2026-1578VVD-OSM-2026-187VVD-OSM-2026-46VVD-OSM-2026-575MAL-2026-1988VVD-OSM-2026-8MAL-2026-1523MAL-2026-1953VVD-OSM-2026-708VVD-OSM-2026-28GHSA-mvrx-3fqg-4hvhVVD-OSM-2026-76VVD-OSM-2026-45GHSA-h95x-pph2-h496VVD-OSM-2026-217VVD-OSM-2026-27MAL-2026-1524GHSA-fr9v-hm5m-rv52VVD-OSM-2026-129VVD-OSM-2026-189MAL-2026-2242MAL-2026-2191VVD-OSM-2026-255GHSA-j74c-w64f-9wg5VVD-OSM-2026-533MAL-2026-1927VVD-OSM-2026-218VVD-OSM-2026-168MAL-2026-1941MAL-2026-1029MAL-2026-2136MAL-2026-1143MAL-2026-1407VVD-OSM-2026-695MAL-2026-1985MAL-2026-2221VVD-OSM-2026-23MAL-2026-2007GHSA-6mrh-fqgr-9x68VVD-OSM-2026-597GHSA-h29v-mffh-vf54VVD-OSM-2026-568VVD-OSM-2026-166VVD-OSM-2026-548VVD-OSM-2026-141VVD-OSM-2026-712MAL-2026-2047MAL-2026-2110VVD-OSM-2026-551MAL-2026-1018VVD-OSM-2026-165GHSA-g4q9-p378-mc3gMAL-2026-2097VVD-OSM-2026-602MAL-2026-2002VVD-OSM-2026-664GHSA-m7hw-fgmf-jwhrVVD-OSM-2026-570MAL-2026-2008VVD-OSM-2026-620VVD-OSM-2026-69GHSA-vvwp-x2vx-wxpfVVD-OSM-2026-692VVD-OSM-2026-116MAL-2026-1969GHSA-j836-pcqv-w9c9VVD-OSM-2026-152VVD-OSM-2026-661VVD-OSM-2026-208MAL-2026-2241VVD-OSM-2026-632GHSA-w977-mj56-jpc7GHSA-cqxq-2582-f357GHSA-fp44-gpc5-cc43VVD-OSM-2026-674MAL-2026-2217VVD-OSM-2026-55MAL-2026-1561VVD-OSM-2026-702GHSA-c93f-8832-92qwGHSA-fgvm-3g6v-ppjfVVD-OSM-2026-194MAL-2026-1538VVD-OSM-2026-537MAL-2026-2091VVD-OSM-2026-151GHSA-9php-8vxv-7gmxVVD-OSM-2026-140VVD-OSM-2026-552VVD-OSM-2026-659GHSA-8vmq-w85q-4q4jMAL-2026-2100GHSA-42g4-g458-9wx9MAL-2026-2216VVD-OSM-2026-10VVD-OSM-2026-539MAL-2026-1049MAL-2026-2032MAL-2026-1997MAL-2026-2133GHSA-7hf8-rm28-2rm8VVD-OSM-2026-682VVD-OSM-2026-95VVD-OSM-2026-681MAL-2026-1044VVD-OSM-2026-161GHSA-7x8p-2g3v-pwqpVVD-OSM-2026-559VVD-OSM-2026-64VVD-OSM-2026-600VVD-OSM-2026-683VVD-OSM-2026-53MAL-2026-1406GHSA-44fq-5mh8-r5hgVVD-OSM-2026-558VVD-OSM-2026-268VVD-OSM-2026-110GHSA-wwjg-c6fp-6648MAL-2026-2164VVD-OSM-2026-715GHSA-m6hv-9gh4-4c85MAL-2026-1943GHSA-4h33-vfc6-f2hhGHSA-wp6r-9m2x-4h55MAL-2026-1521VVD-OSM-2026-210VVD-OSM-2026-262VVD-OSM-2026-572MAL-2026-2099GHSA-6vcv-6xjg-jm7wVVD-OSM-2026-135VVD-OSM-2026-245VVD-OSM-2026-99MAL-2026-1063MAL-2026-2061VVD-OSM-2026-205MAL-2026-1951MAL-2026-1998MAL-2026-1974MAL-2026-2246VVD-OSM-2026-259MAL-2026-2055GHSA-8g7v-w2f5-7gw2VVD-OSM-2026-729VVD-OSM-2026-569VVD-OSM-2026-200MAL-2026-1965VVD-OSM-2026-705MAL-2026-1565MAL-2026-2098VVD-OSM-2026-231MAL-2026-2187VVD-OSM-2026-269MAL-2026-2135VVD-OSM-2026-60GHSA-hfhc-gmgj-9v7vVVD-OSM-2026-562GHSA-rjc8-xw63-3j4jVVD-OSM-2026-12VVD-OSM-2026-590VVD-OSM-2026-718VVD-OSM-2026-653GHSA-p885-4m86-h35rVVD-OSM-2026-256VVD-OSM-2026-114GHSA-xmfj-5j3f-gx7xVVD-OSM-2026-93VVD-OSM-2026-227MAL-2026-2195MAL-2026-1224VVD-OSM-2026-125MAL-2026-1286VVD-OSM-2026-264GHSA-3fjh-jjvh-r58hMAL-2026-2009VVD-OSM-2026-271MAL-2026-1048GHSA-7fpm-p46r-h37gVVD-OSM-2026-142MAL-2026-1086VVD-OSM-2026-79GHSA-q4j2-j63f-5vqxVVD-OSM-2026-68GHSA-mwq7-2fm8-vc4qGHSA-r934-qgg3-v7fgMAL-2026-1294MAL-2026-1341VVD-OSM-2026-1MAL-2026-2040GHSA-76ph-2x99-486xVVD-OSM-2026-62VVD-OSM-2026-694VVD-OSM-2026-16MAL-2026-1261MAL-2026-1940VVD-OSM-2026-24GHSA-5xq6-c5wc-f6x9GHSA-p2f8-jq4c-jj37VVD-OSM-2026-699VVD-OSM-2026-226MAL-2026-2198MAL-2026-1290MAL-2026-2247MAL-2026-2224VVD-OSM-2026-563VVD-OSM-2026-684MAL-2026-2005GHSA-r6f4-p397-5xrjGHSA-53rc-g3gw-946rVVD-OSM-2026-638GHSA-8328-7r2v-2fq6MAL-2026-1572VVD-OSM-2026-172MAL-2026-2001MAL-2026-1971MAL-2026-1963GHSA-9674-vwjj-qxjpMAL-2026-1284VVD-OSM-2026-106MAL-2026-1499VVD-OSM-2026-722VVD-OSM-2026-554VVD-OSM-2026-32VVD-OSM-2026-88GHSA-58m2-f8rc-wwq2VVD-OSM-2026-207VVD-OSM-2026-101GHSA-9wmg-m3mr-xx93MAL-2026-2238MAL-2026-1954MAL-2026-2168MAL-2026-1580MAL-2026-1296MAL-2026-1498VVD-OSM-2026-593VVD-OSM-2026-180MAL-2026-2179VVD-OSM-2026-622VVD-OSM-2026-543MAL-2026-2010VVD-OSM-2026-595VVD-OSM-2026-145MAL-2026-2228VVD-OSM-2026-714VVD-OSM-2026-67VVD-OSM-2026-214GHSA-9mp5-2jp4-wmwwGHSA-x6m2-63j5-v6c7GHSA-xq57-xcgm-9q8qVVD-OSM-2026-611MAL-2026-2125GHSA-3qf9-476p-8j7fMAL-2026-1141GHSA-87mp-vrm9-h8r5MAL-2026-1432GHSA-r54j-4cj8-jf2vVVD-OSM-2026-9GHSA-5w5v-cvxh-55vqMAL-2026-2085MAL-2026-1409VVD-OSM-2026-169VVD-OSM-2026-90GHSA-mrwh-gr28-36wvMAL-2026-1240VVD-OSM-2026-127GHSA-p7pv-mfpq-4rfgGHSA-7xpm-vmrr-4rrvMAL-2026-1091MAL-2026-2074MAL-2026-1558MAL-2026-2089GHSA-69jj-c93h-67p2MAL-2026-1278MAL-2026-1966MAL-2026-1939MAL-2026-1573MAL-2026-2053VVD-OSM-2026-82MAL-2026-1961GHSA-px82-m72x-rpj7MAL-2026-1281MAL-2026-1433GHSA-2rjv-fxjc-xwmvVVD-OSM-2026-196VVD-OSM-2026-171VVD-OSM-2026-577VVD-OSM-2026-677VVD-OSM-2026-636VVD-OSM-2026-201MAL-2026-1035VVD-OSM-2026-203VVD-OSM-2026-221MAL-2026-1968GHSA-hqj8-x2vp-mrp9GHSA-mqvj-42pf-qv58MAL-2026-1226MAL-2026-2235VVD-OSM-2026-92MAL-2026-1527VVD-OSM-2026-239MAL-2026-2130VVD-OSM-2026-147VVD-OSM-2026-215MAL-2026-2155VVD-OSM-2026-709VVD-OSM-2026-594MAL-2026-1142VVD-OSM-2026-195VVD-OSM-2026-47VVD-OSM-2026-120VVD-OSM-2026-723MAL-2026-2161VVD-OSM-2026-154GHSA-3qmv-2h4m-5qg9VVD-OSM-2026-672VVD-OSM-2026-204GHSA-7r3j-rgcw-3jgqGHSA-767f-p685-mw32MAL-2026-2015GHSA-xpmv-42gw-w7wcMAL-2026-1351VVD-OSM-2026-182MAL-2026-1089VVD-OSM-2026-617GHSA-f582-qpjg-gx9hVVD-OSM-2026-148MAL-2026-1986VVD-OSM-2026-623GHSA-r27q-f5jw-j5jpVVD-OSM-2026-38MAL-2026-2160VVD-OSM-2026-730VVD-OSM-2026-6VVD-OSM-2026-150VVD-OSM-2026-251MAL-2026-1288MAL-2026-2196VVD-OSM-2026-566VVD-OSM-2026-197MAL-2026-2048MAL-2026-1957MAL-2026-2218MAL-2026-1970VVD-OSM-2026-164MAL-2026-1566GHSA-4xcw-mhqm-x332VVD-OSM-2026-57VVD-OSM-2026-680GHSA-jq28-7779-5hp9MAL-2026-1064GHSA-38c4-cmg5-vpvcGHSA-6jrx-v84r-9g5mMAL-2026-1948VVD-OSM-2026-689VVD-OSM-2026-105MAL-2026-1223GHSA-82fx-cjgq-fc8vVVD-OSM-2026-216VVD-OSM-2026-655MAL-2026-1088MAL-2026-1560VVD-OSM-2026-621GHSA-jhvp-qr9c-qg9pMAL-2026-1950VVD-OSM-2026-643VVD-OSM-2026-579GHSA-6w26-75vp-gf97MAL-2026-1533MAL-2026-1371VVD-OSM-2026-66VVD-OSM-2026-656VVD-OSM-2026-31MAL-2026-1530MAL-2026-2111VVD-OSM-2026-229MAL-2026-1574GHSA-qw8c-w97q-7p7pVVD-OSM-2026-211VVD-OSM-2026-111GHSA-7qgj-3cfq-g4g4GHSA-2273-pvh3-9x6jVVD-OSM-2026-678VVD-OSM-2026-238VVD-OSM-2026-193GHSA-7g9x-834j-4788VVD-OSM-2026-244VVD-OSM-2026-246VVD-OSM-2026-541GHSA-gmvg-736c-7g9fGHSA-q46m-r8wj-v4p9VVD-OSM-2026-625MAL-2026-1562MAL-2026-2062VVD-OSM-2026-233VVD-OSM-2026-42VVD-OSM-2026-701VVD-OSM-2026-186GHSA-pjwm-q9hh-23wjVVD-OSM-2026-720VVD-OSM-2026-587VVD-OSM-2026-676VVD-OSM-2026-213VVD-OSM-2026-703VVD-OSM-2026-706VVD-OSM-2026-65MAL-2026-2087MAL-2026-1964VVD-OSM-2026-78MAL-2026-1946VVD-OSM-2026-686MAL-2026-2245GHSA-hpqp-f9r8-f725GHSA-24fv-r862-wg4cVVD-OSM-2026-648MAL-2026-1584VVD-OSM-2026-641MAL-2026-1090VVD-OSM-2026-671GHSA-q93m-663h-q987VVD-OSM-2026-29VVD-OSM-2026-588VVD-OSM-2026-596MAL-2026-1557MAL-2026-1952VVD-OSM-2026-109VVD-OSM-2026-675VVD-OSM-2026-633VVD-OSM-2026-667MAL-2026-1277GHSA-82f5-93r9-hhwqVVD-OSM-2026-603VVD-OSM-2026-649VVD-OSM-2026-178VVD-OSM-2026-41MAL-2026-1955MAL-2026-1543VVD-OSM-2026-173MAL-2026-1285VVD-OSM-2026-72VVD-OSM-2026-174VVD-OSM-2026-728VVD-OSM-2026-21MAL-2026-2129MAL-2026-2075MAL-2026-2229MAL-2026-2018MAL-2026-1422VVD-OSM-2026-59MAL-2026-2219GHSA-jcwx-28x8-jf6fVVD-OSM-2026-100VVD-OSM-2026-117GHSA-347h-frw7-j9f5MAL-2026-2248VVD-OSM-2026-184VVD-OSM-2026-660VVD-OSM-2026-81VVD-OSM-2026-20MAL-2026-2153MAL-2026-2134MAL-2026-2090MAL-2026-2204GHSA-gv85-mrvr-pgchMAL-2026-2127GHSA-7v3c-wxfg-x5fgMAL-2026-2073VVD-OSM-2026-63MAL-2026-2207MAL-2026-2206VVD-OSM-2026-629VVD-OSM-2026-545MAL-2026-2102MAL-2026-1937GHSA-fr84-v3mx-mr9xMAL-2026-1926VVD-OSM-2026-631VVD-OSM-2026-657VVD-OSM-2026-133GHSA-jfqc-55rq-mm3jGHSA-9m98-jvf5-jxx5MAL-2026-1138MAL-2026-1982MAL-2026-1412VVD-OSM-2026-146VVD-OSM-2026-716VVD-OSM-2026-652VVD-OSM-2026-199VVD-OSM-2026-254MAL-2026-1568VVD-OSM-2026-540MAL-2026-1411MAL-2026-2166GHSA-r6qh-rm6v-7pvxVVD-OSM-2026-710VVD-OSM-2026-3VVD-OSM-2026-157VVD-OSM-2026-534VVD-OSM-2026-679MAL-2026-1973MAL-2026-2163MAL-2026-2060VVD-OSM-2026-134MAL-2026-2132VVD-OSM-2026-270VVD-OSM-2026-177MAL-2026-1488MAL-2026-1280VVD-OSM-2026-97GHSA-5q3v-cjxm-6cgmMAL-2026-1435VVD-OSM-2026-585GHSA-rm67-f2rf-9fwfMAL-2026-1582VVD-OSM-2026-258VVD-OSM-2026-104MAL-2026-2000MAL-2026-1995MAL-2026-1438MAL-2026-2006VVD-OSM-2026-711VVD-OSM-2026-37MAL-2026-1283VVD-OSM-2026-149GHSA-r23r-8c7q-wm92VVD-OSM-2026-225VVD-OSM-2026-96GHSA-gmxq-2g92-63xvVVD-OSM-2026-48MAL-2026-2190GHSA-3qf5-vfww-7p7gMAL-2026-1436VVD-OSM-2026-665MAL-2026-1579VVD-OSM-2026-637MAL-2026-2178VVD-OSM-2026-557VVD-OSM-2026-615GHSA-8m7g-rpw2-w26vVVD-OSM-2026-673MAL-2026-2169VVD-OSM-2026-555GHSA-8f57-hh49-gmqfVVD-OSM-2026-74VVD-OSM-2026-535VVD-OSM-2026-241VVD-OSM-2026-232MAL-2026-2225VVD-OSM-2026-83VVD-OSM-2026-658GHSA-fppj-8rcf-8fppVVD-OSM-2026-137MAL-2026-2154VVD-OSM-2026-242VVD-OSM-2026-73MAL-2026-1325MAL-2026-2159GHSA-f9m8-w27f-mxr3MAL-2026-1938MAL-2026-1962GHSA-cxvr-pcxc-6r58VVD-OSM-2026-179MAL-2026-2019MAL-2026-1956MAL-2026-1976GHSA-jffg-8cwf-786hGHSA-8w5j-p4jv-8rmqMAL-2026-1437MAL-2026-1350VVD-OSM-2026-185VVD-OSM-2026-627GHSA-ppr8-pvc2-8f99VVD-OSM-2026-162VVD-OSM-2026-14GHSA-h2h6-q29m-3mm3GHSA-jvrr-w8mr-28hpVVD-OSM-2026-84VVD-OSM-2026-578VVD-OSM-2026-107VVD-OSM-2026-36VVD-OSM-2026-261MAL-2026-1947VVD-OSM-2026-4MAL-2026-2093VVD-OSM-2026-122VVD-OSM-2026-613GHSA-hmv2-22ff-cxh8VVD-OSM-2026-635MAL-2026-2240VVD-OSM-2026-40VVD-OSM-2026-124MAL-2026-2234MAL-2026-1567MAL-2026-1949VVD-OSM-2026-121VVD-OSM-2026-139GHSA-69cx-hr8r-mc9jMAL-2026-2037MAL-2026-2101GHSA-x2c8-m9xp-3qmvGHSA-jrpm-f5xg-3frjGHSA-pjxj-7mxh-9348MAL-2026-1517GHSA-52w3-g4x3-xw3hMAL-2026-2200MAL-2026-2103VVD-OSM-2026-670VVD-OSM-2026-155GHSA-vpx7-g2h6-rq6cGHSA-8cpf-9rj8-q68mVVD-OSM-2026-260VVD-OSM-2026-43VVD-OSM-2026-247GHSA-hc54-whg7-r7g2VVD-OSM-2026-538GHSA-5g2c-h3r8-6w3gVVD-OSM-2026-576MAL-2026-2076VVD-OSM-2026-223VVD-OSM-2026-112VVD-OSM-2026-25MAL-2026-1139VVD-OSM-2026-71VVD-OSM-2026-181MAL-2026-2189VVD-OSM-2026-160MAL-2026-2095MAL-2026-1992MAL-2026-1983VVD-OSM-2026-128MAL-2026-2194MAL-2026-1098MAL-2026-1569MAL-2026-2094GHSA-c39r-4xjc-wrcvVVD-OSM-2026-647VVD-OSM-2026-574VVD-OSM-2026-582MAL-2026-2220GHSA-887f-wrq6-j685MAL-2026-2239MAL-2026-2081MAL-2026-1241VVD-OSM-2026-616VVD-OSM-2026-654VVD-OSM-2026-546GHSA-f8qc-h6gw-x2vmVVD-OSM-2026-663VVD-OSM-2026-33GHSA-36wg-c889-h26jMAL-2026-1340VVD-OSM-2026-690VVD-OSM-2026-263VVD-OSM-2026-581MAL-2026-1981VVD-OSM-2026-143MAL-2026-1990GHSA-95h8-q9jh-jjwfMAL-2026-1979VVD-OSM-2026-704GHSA-wv5m-jqq3-c22xMAL-2026-2188MAL-2026-2167VVD-OSM-2026-586MAL-2026-2233GHSA-64p5-3wp7-v4c9VVD-OSM-2026-26VVD-OSM-2026-126VVD-OSM-2026-77GHSA-fm43-2f72-p329VVD-OSM-2026-707VVD-OSM-2026-607VVD-OSM-2026-630VVD-OSM-2026-252VVD-OSM-2026-608MAL-2026-1934MAL-2026-1279GHSA-2rj8-6crh-98qqGHSA-gfm3-3p4f-m57wVVD-OSM-2026-56VVD-OSM-2026-183VVD-OSM-2026-18VVD-OSM-2026-113MAL-2026-1978VVD-OSM-2026-70VVD-OSM-2026-691VVD-OSM-2026-685VVD-OSM-2026-662VVD-OSM-2026-17MAL-2026-1082MAL-2026-1496VVD-OSM-2026-640VVD-OSM-2026-550MAL-2026-2080VVD-OSM-2026-144MAL-2026-2176VVD-OSM-2026-628VVD-OSM-2026-553VVD-OSM-2026-220MAL-2026-2244VVD-OSM-2026-624VVD-OSM-2026-22GHSA-4gc2-gg24-6qf6GHSA-hqf3-9jfp-qgh9VVD-OSM-2026-265VVD-OSM-2026-565VVD-OSM-2026-119GHSA-6rj6-xwm6-v698VVD-OSM-2026-206MAL-2026-1291GHSA-28w8-cpp5-g448GHSA-52hw-wvx9-x8pqVVD-OSM-2026-257VVD-OSM-2026-542GHSA-9xfj-83q4-hxj6GHSA-r8j3-m86x-q66xMAL-2026-2156GHSA-vrqq-pxvj-f2mgGHSA-pjmv-p8w4-fjq5VVD-OSM-2026-234MAL-2026-1092VVD-OSM-2026-192VVD-OSM-2026-567VVD-OSM-2026-80VVD-OSM-2026-713VVD-OSM-2026-132GHSA-4p9p-g69r-jxv8VVD-OSM-2026-599VVD-OSM-2026-645MAL-2026-1287GHSA-j4p4-x5rc-96xxMAL-2026-2123MAL-2026-1479MAL-2026-1431VVD-OSM-2026-212MAL-2026-1944VVD-OSM-2026-688GHSA-wgjr-2vhj-qwv7VVD-OSM-2026-687MAL-2026-2199VVD-OSM-2026-61MAL-2026-1262MAL-2026-1342VVD-OSM-2026-175MAL-2026-2165VVD-OSM-2026-536MAL-2026-1959VVD-OSM-2026-198VVD-OSM-2026-573MAL-2026-1378MAL-2026-1529MAL-2026-2064GHSA-wcrr-xhm3-j3x9VVD-OSM-2026-598MAL-2026-1564MAL-2026-1410VVD-OSM-2026-717VVD-OSM-2026-103VVD-OSM-2026-698MAL-2026-2193VVD-OSM-2026-86MAL-2026-2082MAL-2026-1085VVD-OSM-2026-272MAL-2026-1019VVD-OSM-2026-266MAL-2026-1080VVD-OSM-2026-102VVD-OSM-2026-163VVD-OSM-2026-584MAL-2026-2162VVD-OSM-2026-248VVD-OSM-2026-666MAL-2026-1570MAL-2026-1925VVD-OSM-2026-224MAL-2026-2185VVD-OSM-2026-49MAL-2026-1136VVD-OSM-2026-604MAL-2026-1583GHSA-39vv-2g62-pp83MAL-2026-1339GHSA-6w74-x38v-9ffjVVD-OSM-2026-619GHSA-3hr5-9jhx-97c5VVD-OSM-2026-98MAL-2026-2088MAL-2026-2157GHSA-cp44-cvhx-wf33MAL-2026-1544VVD-OSM-2026-668GHSA-3j5q-xvjq-rqxqMAL-2026-1980VVD-OSM-2026-5VVD-OSM-2026-697VVD-OSM-2026-108MAL-2026-2223VVD-OSM-2026-560VVD-OSM-2026-7VVD-OSM-2026-609MAL-2026-1140VVD-OSM-2026-209VVD-OSM-2026-58VVD-OSM-2026-605VVD-OSM-2026-228MAL-2026-1099VVD-OSM-2026-564VVD-OSM-2026-19GHSA-86xp-4fvm-qm2pVVD-OSM-2026-13VVD-OSM-2026-669VVD-OSM-2026-54MAL-2026-1222VVD-OSM-2026-556MAL-2026-2086VVD-OSM-2026-549GHSA-3m3c-wc3h-m5mrMAL-2026-1932MAL-2026-1235MAL-2026-1972VVD-OSM-2026-249VVD-OSM-2026-15GHSA-5g7h-cvvx-x96cVVD-OSM-2026-130GHSA-5w92-jfv8-ppvxVVD-OSM-2026-614GHSA-p4gv-m838-2xq9GHSA-f6jh-hc8p-xpfxVVD-OSM-2026-719VVD-OSM-2026-202VVD-OSM-2026-176VVD-OSM-2026-634VVD-OSM-2026-580VVD-OSM-2026-253VVD-OSM-2026-44GHSA-f8cx-966c-8x2hGHSA-2gfq-7ff6-3mr7VVD-OSM-2026-610MAL-2026-2222VVD-OSM-2026-721VVD-OSM-2026-267MAL-2026-1434GHSA-x49c-wrwr-8p2qMAL-2026-1960GHSA-2prc-m9c3-jgwpMAL-2026-2192VVD-OSM-2026-34VVD-OSM-2026-583MAL-2026-2063VVD-OSM-2026-89VVD-OSM-2026-250MAL-2026-1275VVD-OSM-2026-230GHSA-hqvw-49vr-fpw3VVD-OSM-2026-30GHSA-74r2-ggvc-h778VVD-OSM-2026-39MAL-2026-1942VVD-OSM-2026-131VVD-OSM-2026-167VVD-OSM-2026-191VVD-OSM-2026-237MAL-2026-1958MAL-2026-2203VVD-OSM-2026-115MAL-2026-1563VVD-OSM-2026-75VVD-OSM-2026-158MAL-2026-2243MAL-2026-1482VVD-OSM-2026-94MAL-2026-1977VVD-OSM-2026-2GHSA-25q2-f9vw-3hf3GHSA-4g9r-2x44-gfm4VVD-OSM-2026-52GHSA-4wgw-h2cc-rpv6GHSA-x8xx-3mj7-337xMAL-2026-2096MAL-2026-2126MAL-2026-2128VVD-OSM-2026-138VVD-OSM-2026-136VVD-OSM-2026-693VVD-OSM-2026-724MAL-2026-2186MAL-2026-2079VVD-OSM-2026-11VVD-OSM-2026-85GHSA-x24f-q36q-6pcjVVD-OSM-2026-606GHSA-34h2-gr5g-vc3jMAL-2026-2181VVD-OSM-2026-651VVD-OSM-2026-591MAL-2026-1289MAL-2026-2131VVD-OSM-2026-222

References

Malicious pypi package: botbooster
advisory
advisory
vendor

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›