Daily Hunt Feed - 2026-10-18

Threat Hunt Feed (2026-10-18)

OpenCode Hacked: User credentials leaked — Sat, 17 Oct 2026 18:01:41 +0000
- Matched TTPs: Credentials (T1589.001), At (T1053.002)
Show HN: Llmspeed – feel how fast a local LLM runs before you buy the hardware — Sat, 17 Oct 2026 04:36:53 +0000
- Matched TTPs: Hardware (T1592.001)
How the Claude Code team does code review — Fri, 16 Oct 2026 19:04:47 +0000
- Matched TTPs: Proxy (T1090), At (T1053.002)
Postgres 19 delayed after AI reviewers find more bugs than humans can fix — Fri, 16 Oct 2026 15:55:40 +0000
- Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
I love software rendering — Fri, 16 Oct 2026 12:52:08 +0000
- Matched TTPs: Hardware (T1592.001), Software (T1592.002), At (T1053.002)

Drupal patches critical RCE flaws, warns exploits may emerge soon — Sat, 17 Oct 2026 10:32:48 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)

MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon — Sat, 17 Oct 2026 16:41:56 +0530
- Matched TTPs: Scheduled Task (T1053.005), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)