Corrections
Every change made to a record's classification after it was published, with the reason. Reports come from the form on each record page; the classifier audit and the maintainer's own review find the rest. Dataset releases are frozen, so a correction applies to the live site and to the next release.
- Corrections
- 633
- Reports received
- 0
- Reports declined
- 0
- Reports open
- 0
Each correction is listed as its own row. Group bulk changes
| Date | Record | Change | Reason | Found by |
|---|---|---|---|---|
| 2026-10-10 | Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | 1,800+ MCP servers exposed without authentication: How zero trust can secure the AI agent revolution | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Malicious Hugging Face model masquerading as OpenAI release hits 244K downloads | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Google discovers weaponized zero-day exploits created with AI | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | TanStack, Mistral AI, UiPath Hit in Fresh Supply Chain Attack | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Copy.Fail Linux Vulnerability | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Shai Hulud attack ships signed malicious TanStack, Mistral npm packages | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Fake Claude Code takes the IElevator to your browser secrets | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Hugging Face Packages Weaponized With a Single File Tweak | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Mistral AI SDK, TanStack Router hit in npm software supply chain attack | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Memory Is a Feature. It Is Also an Attack Surface | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a research publication. | Classifier audit |
| 2026-10-10 | Hackers Targeted PraisonAI Vulnerability Hours After Disclosure | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | PraisonAI vulnerability gets scanned within 4 hours of disclosure | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | OpenAI confirms security breach in TanStack supply chain attack | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | TeamPCP hackers advertise Mistral AI code repos for sale | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | AI agent finds 18-year-old remote code execution flaw in Nginx | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | OpenAI Hit by TanStack Supply Chain Attack | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | 'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Anthropic Silently Patches Claude Code Sandbox Bypass | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | GitHub admits major source code leak after 3,800 internal repositories breached | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Unpatched ChromaDB flaw leaves servers open to remote code execution | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | AI Attacks Are No Longer Experimental: Key Findings from the March-April 2026 AI Threat Landscape | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | TrapDoor malware campaign puts developer workstations in CISO spotlight | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Microsoft Copilot Cowork Exfiltrates Files | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | The NSA, ‘Mythos’ and the quiet emergence of AI cyber doctrine | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | ‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Malicious npm Package Stole Files From Claude AI User Directory via GitHub | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | GreyVibe hackers use ChatGPT, Gemini to power cyberattacks | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | ChatGPT share links abused to host fake outage pages to deliver malware | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Russia-aligned crime group Greyvibe extensively uses AI in attacks | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Flowise’s MCP implementation can run ghost commands | Severity: critical to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Attack targeting OpenAI Codex users exposes AI software supply chain risks | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | HP Poly VoIP vulnerability sets the stage for executive voice deepfakes | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | The sorry state of skill distribution | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | WhatsApp, Slack Notifications Could Hijack Google Gemini on Android | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Hacking Meta’s AI Chatbot | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Hugging Face Transformers RCE flaw enables stealthy compromise via AI model configs | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Gemini Voice Assistant Hijacked via Messaging Notifications | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |
| 2026-10-10 | Claude Code has an MCP security problem — and your developers are already using it | Severity: high to medium | Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report. | Classifier audit |