CVE-2025-61303

CVE-2025-61303 concerns a vulnerability in the Windows behavioral analysis engine used by Hatching Triage Sandbox (Windows 10 build 2004 and Windows 10 LTSC 2021). The issue arises when a sample recursively spawns a very large number of child processes, producing an extreme log volume and exhaust...

MAL-2025-191776 Malicious code in klsosdoids2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d72d2891383419bc38738c4c3be786e31a5000e46d5b3064bacf11561ad69af8 Package simulates malicious activity during installation and has no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest package...

MAL-2025-48506 Malicious code in simmons (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48486 Malicious code in circleci-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d54b71e0248eb8babb0f78827eff5338450108a9cb2814de5573278a5eac86c Any computer that has this package installed or running should be considered...

MAL-2025-48479 Malicious code in ai-protocol (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48510 Malicious code in src_module_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bf9366083306734c374979ba195511ae8d793d9e0cb915f2f7374ee7450724c Any computer that has this package installed or running should be considered...

MAL-2025-48461 Malicious code in @shopify.com/shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2bd69260e57b66e60b0e7aa07aab1d645f5cb9c42f30ce261b119e51f92ffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48460 Malicious code in moloch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b1031cde1246782696826dc75e577185deabe22db26d409930d94dc254b2232 The OpenSSF Package Analysis project identified 'moloch' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Exploit for CVE-2022-30190

LetsDefend-SOC173-Follina-0-Day-Detected We are presented with...

MAL-2025-48509 Malicious code in src_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ae49816d96bbde1aa23dd8285270956273b0026f724d325d2daed22c08b966 Any computer that has this package installed or running should be considered...

MAL-2025-48500 Malicious code in internal-native-buy (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @institute-of-data-management/n11-chatbot (npm)

The package communicates with a domain associated with malicious activity...

CERTFR-2025-ACT-044

creationtimestamp| type| source ---|---|--- 2025-10-17 13:47:25+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115389814744948859...

Prosper data breach puts 17 million people at risk of identity theft

Peer-to-peer lending marketplace Prosper detected unauthorized activity on their systems on September 2, 2025. It published an FAQ page later that month to address the incident. During the incident, the attacker stole personal information belonging to Prosper customers and loan applicants. As...

MAL-2025-48481 Malicious code in api_halodoc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48498 Malicious code in internal-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in deere-ui-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac60fab9b04ceb2a6e45e76986b8fa08dcb797e40cb4d7b88cb5d16cfbeec85b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48446 Malicious code in deere-ui-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac60fab9b04ceb2a6e45e76986b8fa08dcb797e40cb4d7b88cb5d16cfbeec85b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48443 Malicious code in deere-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355a3e4ff7770ab39aebef0eb84829ba45685d6fe842518c585de20021b505f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48433 Malicious code in corp-ais-client-my-channel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5c6a2e2c6632d11abe65b902c4dee848386ec4240aba0fee8f76983ac4ff56 The OpenSSF Package Analysis project identified 'corp-ais-client-my-channel-lib' @ 99.9.10 npm as malicious. It is considered malicious because:...