10116 matches found
MAL-2025-41391 Malicious code in kibiutils (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41385 Malicious code in gbb-kubernetes-hackfest-webui-dashboard (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41244 Malicious code in hey-message-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82160038204459189291779030b0cd92dbe157e779d3b1cae48e25a84053ee9a The OpenSSF Package Analysis project identified 'hey-message-content' @ 8.99.1 npm as malicious. It is considered malicious because: - The packa...
SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis
Cyber-attacks on operational technology OT and cyber-physical systems CPS have increased tremendously in recent years with the proliferation of malware targeting Linux-based embedded devices of OT and CPS systems. Comprehensive malware detection requires dynamic analysis of execution behavior in...
Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in attacks aimed at enterprises located in the U.S., Europe, Baltic countries, and the Asia-Pacific APAC region. "The Noodlophile campaign, activ...
MAL-2025-191732 Malicious code in flask-tdg-cyberx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...
Malicious code in flask-tdg-cyberx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...
Malicious code in personalizationtrkserv (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...
Malicious code in react-stickynod (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6952 Malicious code in react-stickynod (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ember-lts-4.4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6916 Malicious code in burst-dash (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6964 Malicious code in tiktok-prod (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tiktok-dev (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6963 Malicious code in tiktok-dev (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6915 Malicious code in bug-bounty-hunter (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in bug-bounty (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in vite-plugin-netx-project (npm)
The package communicates with a domain associated with malicious activity...