10118 matches found
MAL-2025-5443 Malicious code in nodergb-server (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78a86d286601cf04014b221b8874ef2c2996e5bf707d31143ccefa79e8ab1d40 Any computer that has this package installed or running should be considered...
Malicious code in commonjs-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eb6fb77a7ed0e6f32859fe04a1eb474d52987aaf21bb24d32c51656ff5de850 Any computer that has this package installed or running should be considered...
MAL-2025-5299 Malicious code in cms-media-bridge (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ecd3cb94016b2ab409b5d86ab82909b3b59b2389dd232be9049fbc7f0823ba1 Any computer that has this package installed or running should be considered...
Malicious code in pkg-dev-deps-only (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485d0ed1b5c95a60c68f04e0d03f68c9cb74cf2f0d2cc2181b99be5b1b8d7dc5 Any computer that has this package installed or running should be considered...
Malicious code in prototype-poisoning-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7e50b04c4ffcf207fdb21b54873ca1488fe7dd526b90c1206bc830af9b111b Any computer that has this package installed or running should be considered...
MAL-2025-5417 Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1ddc36f47ef52c0cb79e772a23bbc635d435ea0029cddcc4ba60ea0a6ced5e Any computer that has this package installed or running should be considered...
Malicious code in retaillocationserv-paypal (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0409d54039e50835f5e9986281184dc84f53f8c20c6a838505fcd8097c538feb The OpenSSF Package Analysis project identified...
Malicious code in tableau-vizportal-webclient-api (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5390 Malicious code in defectdojo (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5290 Malicious code in nf-cl-loger (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ef6d67424e2f4b0f602a07367e287f1764cf98b2d5fb663a5bcef30ed76950f The OpenSSF Package Analysis project identified 'nf-cl-loger' @ 11.0....
MOVEit Transfer Faces Increased Threats as Scanning Surges and CVE Flaws Are Targeted
Threat intelligence firm GreyNoise is warning of a "notable surge" in scanning activity targeting Progress MOVEit Transfer systems starting May 27, 2025—suggesting that attackers may be preparing for another mass exploitation campaign or probing for unpatched systems. MOVEit Transfer is a popular...
How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker
FBI tracked IntelBroker as UK’s Kai West using an email address, crypto trails, YouTube activity and forum posts after dozens of high-profile data breaches and darknet activity...
Malicious code in phantom-labs-sandbox (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd1e98be0b346737740a6114c37dc7dd21cd328f21d026e07d9eb0348e43464 Any computer that has this package installed or running should be considered...
Malicious code in codesandbox-deps (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8cbaaee48ac510c9d11bc481194ff5a4006d0233d8d2d06a3422628cea6a879 Any computer that has this package installed or running should be considered...
Malicious code in robinhood-internal-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5350c4af558b6036e996982e7ac060be1ac0516b91dfd7b983a5c0b5d76270ec The OpenSSF Package Analysis project identified...
MAL-2025-5311 Malicious code in dx-chat-ai-client (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fe55043b26ce76d97d00a4b1f3c89c2f2dfd3c8256f36139e90939f8ee1f570 Any computer that has this package installed or running should be considered...
Malicious code in astro-island (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in undeconf (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513c9e34a7d02530bdb34fc364d7c5411914263c5960f4a4cc7fa967c3c01f36 Any computer that has this package installed or running should be considered...
Malicious code in jira-dashboard-items (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ab5b6ba91047c189dc1c045205cf83046fa39fd12a9292f3ed8b4ea48582b6 Any computer that has this package installed or running should be considered...