10117 matches found
CVE-2025-38437
creationtimestamp| type| source ---|---|--- 2025-07-25 16:24:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lushifr47hx2 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
MAL-2025-6237 Malicious code in gafana-test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4e648e988f33de6b085bf631d45494adb7b9be241071b454c40705384ad7e6e The OpenSSF Package Analysis project identified 'gafana-test-utils' @...
Malicious code in bufbuild-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea2a6d8f75509bff2876bce466f00b9c7c810394f46e6479c6e2d8b19acc9557 The OpenSSF Package Analysis project identified 'bufbuild-core' @ 1.0...
MAL-2025-6232 Malicious code in plugin-basic-ssl (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c91f97ac10fa598313b2e03c827655a79a9eb89adf780dbd0df721f49780a8 Any computer that has this package installed or running should be considered...
MAL-2025-6230 Malicious code in airbnb-private (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 600d55fd3b665720464310cd371ad34de68ce71c922d62c4253b2faa215c0c39 Any computer that has this package installed or running should be considered...
Malicious code in kalitestbbh (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e73ee538aaefd2dcb0c98564285812c9ac69f9e308fac7b6de60784ebf954a2 Any computer that has this package installed or running should be considered...
Surges in Cyber Activity Accompany Regional Military Operations
Geopolitical events and military operations often trigger a cascade of online activity, both legitimate and malicious. Recent data from our global threat network highlights the strong connection between military escalations and cyberattacks, with the latest example unfolding in the Middle East...
MAL-2025-6292 Malicious code in lu-anywhere (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in drive-sdk (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6226 Malicious code in react-dom-builtin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac7450c93d4fe9acd7455d948757158cfef0776508f78ee3544d4cad40dc18b2 The OpenSSF Package Analysis project identified 'react-dom-builtin' @...
Malicious code in binance-dev (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in rcepoc (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in slack-internals (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in snx-sips (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6225 Malicious code in xk6-top (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14bf109f34ed2a77090e261e001bc285f9e3c59006cb9c2ccf14f34fda5ff61e The OpenSSF Package Analysis project identified 'xk6-top' @ 10.1.1 np...
Malicious code in airbnb-internals (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6317 Malicious code in testandooteste (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6285 Malicious code in flash-hros (npm)
The package communicates with a domain associated with malicious activity...