Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Python Packages Vulnerable to Node2Shell Brotli CVE

OpenSourceMalware
OpenSourceMalware
Published October 23, 2026Original Report

Excerpt

Python Packages Vulnerable to Node2Shell Brotli CVE | OpenSourceMalware BLOG Python Packages Vulnerable to Node2Shell Brotli CVE Turns out that Node2Shell affects more than just Node! Python packages Brotli and brotlicffi are also affected by this vulnerability, but don't have a CVE. By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 · 2026-10-23T05:31:00.000Z Node2Shell ain’t just a Node.js bug: the PyPI Brotli and brotlicffi packages ship the same vulnerable C decoder. I know its…

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-111497HighScore 82/100First seen

IOC Relationship Graph

Building graph…