MAL-2025-48557 Malicious code in demo-bike-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c9ef89d7c326b74bbab220d2d159df0e002f04d0379ce022ddad517f9b023d3a The OpenSSF Package Analysis project identified 'demo-bike-store' @ 2.0.1 npm as malicious. It is considered malicious because: - The package...

IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid response

Threat actors predominately exploited public-facing applications for initial access this quarter, with this tactic appearing in over 60 percent of Cisco Talos Incident Response Talos IR engagements - a notable increase from less than 10 percent last quarter. This spike is largely attributable to ...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-61932link is external Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability This type of vulnerability is ...

MAL-2025-48685 Malicious code in gitlab-accountid (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in shutterstock-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a07df288218d171e1132e93d24e0f6e75160174cf78ef8589073b1e7eb72a Any computer that has this package installed or running should be considered...

MAL-2025-48762 Malicious code in shutterstock-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a07df288218d171e1132e93d24e0f6e75160174cf78ef8589073b1e7eb72a Any computer that has this package installed or running should be considered...

MAL-2025-48764 Malicious code in test-all2 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in infobip-calls-showcase (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a032e7c75c74d99948394ea2e689b4b0c7d679a0bec3adcf6f869a27cda5c0 Any computer that has this package installed or running should be considered...

Malicious code in global-utils-helper-2025 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48550 Malicious code in doppler-secrets-fetch-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Falco 0.42.0

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

MAL-2025-48684 Malicious code in garud-production (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in shiprocket-invoice-export (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48749 Malicious code in ofjaaaah-helper-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...

MAL-2025-48738 Malicious code in local_shopping_cart (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5357126837d84ed1343aac08c62d03ffcf34e1c8a78b7fa51af74852f46efce9 Any computer that has this package installed or running should be considered...

EUVD-2025-35102

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

Inside the attack chain: Threat activity targeting Azure Blob Storage

Azure Blob Storage, like any object data service, is a high-value target for threat actors due to its critical role in storing and managing massive amounts of unstructured data at scale across diverse workloads. Organizations of all sizes use Blob Storage to support key workloads—such as AI, high...

Inside the attack chain: Threat activity targeting Azure Blob Storage

Azure Blob Storage, like any object data service, is a high-value target for threat actors due to its critical role in storing and managing massive amounts of unstructured data at scale across diverse workloads. Organizations of all sizes use Blob Storage to support key workloads—such as AI, high...

Malicious code in @odoreltd/osiris-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32a73b3fd49b5ad7e472425aec55d80718039bee3d41c8a3f9eb7d5fccfed450 The OpenSSF Package Analysis project identified '@odoreltd/osiris-api' @ 5.5.9 npm as malicious. It is considered malicious because: - The packa...

CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...