MAL-2025-31768 Malicious code in react-bootstrap-nightwatch-andromeda-mysql (npm)

The package react-bootstrap-nightwatch-andromeda-mysql was found to contain malicious code...

MAL-2025-21256 Malicious code in gemini-andromeda-geckodriver-prompts (npm)

The package gemini-andromeda-geckodriver-prompts was found to contain malicious code...

MAL-2025-34081 Malicious code in stream-polaris-andromeda-cz-conventional-changelog (npm)

The package stream-polaris-andromeda-cz-conventional-changelog was found to contain malicious code...

MAL-2025-39093 Malicious code in weywot-typeorm-andromeda-global (npm)

The package weywot-typeorm-andromeda-global was found to contain malicious code...

MAL-2025-39002 Malicious code in webdriverio-oortcloud-rigel-andromeda (npm)

The package webdriverio-oortcloud-rigel-andromeda was found to contain malicious code...

MAL-2025-14757 Malicious code in aquarius-elara-andromeda-equinox (npm)

The package aquarius-elara-andromeda-equinox was found to contain malicious code...

MAL-2025-14512 Malicious code in andromeda-on-framework-webdriver-manager (npm)

The package andromeda-on-framework-webdriver-manager was found to contain malicious code...

MAL-2025-14511 Malicious code in andromeda-middleware-lightyear-photon (npm)

The package andromeda-middleware-lightyear-photon was found to contain malicious code...

MAL-2025-14510 Malicious code in andromeda-eslint-config-graviton-ophiuchus (npm)

The package andromeda-eslint-config-graviton-ophiuchus was found to contain malicious code...

MAL-2025-14509 Malicious code in andromeda-child-process-local-firebase (npm)

The package andromeda-child-process-local-firebase was found to contain malicious code...

MAL-2025-14950 Malicious code in asteroid-andromeda-superagent-terser (npm)

The package asteroid-andromeda-superagent-terser was found to contain malicious code...

MAL-2025-31936 Malicious code in redis-mantle-andromeda-lint-staged (npm)

The package redis-mantle-andromeda-lint-staged was found to contain malicious code...

MAL-2025-24132 Malicious code in jwt-andromeda-eridanus-bellatrix (npm)

The package jwt-andromeda-eridanus-bellatrix was found to contain malicious code...

MAL-2025-24342 Malicious code in kastra-tachyon-andromeda-passport (npm)

The package kastra-tachyon-andromeda-passport was found to contain malicious code...

MAL-2025-24352 Malicious code in kaus-petrology-postcss-loader-andromeda (npm)

The package kaus-petrology-postcss-loader-andromeda was found to contain malicious code...

MAL-2025-26916 Malicious code in mutation-xml-hologram-andromeda (npm)

The package mutation-xml-hologram-andromeda was found to contain malicious code...

MAL-2025-27522 Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)

The package nightwatch-andromeda-dotenv-safe-figures was found to contain malicious code...

MAL-2025-29118 Malicious code in phenomic-andromeda-miranda-io (npm)

The package phenomic-andromeda-miranda-io was found to contain malicious code...

MAL-2025-17629 Malicious code in cosmos-virgo-andromeda-loopback (npm)

The package cosmos-virgo-andromeda-loopback was found to contain malicious code...

Turla APT used ANDROMEDA malware to infiltrate a variety of industries

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Turla Group is reportedly distributing the KOPILUWAK reconnaissance software and the QUIETCANARY backdoor to victims of ANDROMEDA malware in Ukraine. ANDROMEDA malware, spread through infected USB...