MAL-2025-18700 Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)

The package down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn was found to contain malicious code...

MAL-2025-13663 Malicious code in @zalastax/nolb-react-ad (npm)

The package @zalastax/nolb-react-ad was found to contain malicious code...

MAL-2025-7748 Malicious code in @diotobtea/ad-error-accusantium (npm)

The package @diotobtea/ad-error-accusantium was found to contain malicious code...

MAL-2025-7926 Malicious code in @erboladaiteas/unde-ad-perferendis (npm)

The package @erboladaiteas/unde-ad-perferendis was found to contain malicious code...

MAL-2025-8302 Malicious code in @landmineaknpm2/tempore-dolorum-ad (npm)

The package @landmineaknpm2/tempore-dolorum-ad was found to contain malicious code...

MAL-2025-37590 Malicious code in ui-ad-marketplace (npm)

The package ui-ad-marketplace was found to contain malicious code...

MAL-2025-10627 Malicious code in @zalastax/nolb-ad (npm)

The package @zalastax/nolb-ad was found to contain malicious code...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

The malicious ad tech purveyor known as VexTrio Viper has been observed developing several malicious apps that have been published on Apple and Google's official app storefronts under the guise of seemingly useful applications. These apps masquerade as VPNs, device "monitoring" apps, RAM cleaners...

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

The malicious ad tech purveyor known as VexTrio Viper has been observed developing several malicious apps that have been published on Apple and Google's official app storefronts under the guise of seemingly useful applications. These apps masquerade as VPNs, device "monitoring" apps, RAM cleaners...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

CVE-2025-54638

CVE-2025-54638 involves an inconsistent read/write serialization issue in the ad module. Connected sources indicate potential impact on availability of the ad service; CVSS details point to a local attack with low privileges required and no user interaction. No concrete fix/version is stated in t...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

PT-2025-32080 · Unknown · Aod Module

Name of the Vulnerable Software and Affected Versions: ad module affected versions not specified Description: An inconsistent read/write serialization issue exists in the ad module. Successful exploitation of this issue may affect the availability of the ad service. Recommendations: At the moment...

CVE-2025-54638: Deserialization of Untrusted Data

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

Introducing the smarter, more sophisticated Malwarebytes Trusted Advisor, your cybersecurity personal assistant

You ever get that feeling when you double-check the locks, but still wonder if you’ve missed something? That’s what a lot of people feel about cybersecurity. That’s where Malwarebytes Trusted Advisor comes in. You can see it as your very own cybersecurity personal assistant, giving you real-time...

Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Sues 25 Chinese Entities Over BADBOX 2.0 Botnet Affecting 10M Android Devices

Google on Thursday revealed it's pursuing legal action in New York federal court against 25 unnamed individuals or entities in China for allegedly operating BADBOX 2.0 botnet and residential proxy infrastructure. "The BADBOX 2.0 botnet compromised over 10 million uncertified devices running...