392 matches found
Fake ChatGPT download site infects Windows and Mac users with malware
A convincing fake website is impersonating OpenAI’s ChatGPT download page and infecting visitors with malware designed to steal passwords, browser data, cryptocurrency wallets, and other sensitive information. The site, openew.app, closely mimics OpenAI’s real ChatGPT download experience and offe...
MAL-2026-4205 Malicious code in defi-threat-scanner (npm)
A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...
MAL-2026-4204 Malicious code in defi-env-auditor (npm)
A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...
MAL-2026-3765 Malicious code in joi-pack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca38e3574ffcb0fabb105616e28108137c8256e2c70aeede59623bca5df496a The package declares a postinstall hook "postinstall": "node postinstall.js" in package.json that runs unconditionally on npm install. The script's o...
WS-2019-0486
Web3-eht contains malicious code. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0485
We3b contains malicious code. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0484
Wbe3 contains malicious code.The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0470
All versions of ripmed160 contain malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0469
All versions of ripedm160 contain malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0467
All versions of riped160 contain malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0466
All versions of this package contains malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0462
Versions v1.0.0 and v1.0.4 of path-to-regxep contain malware. The package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0413
crpyto-js was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0409
colne was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0404
Bitcroe-lib versions 1.0.4 and 8.10.0 contains malicious code. The malicious code steals cryptocurrency wallets...
WS-2019-0403
bitconijs-lib package was designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0402
Bitcoisnj-lib is a malicious package which designed to find and exfiltrate cryptocurrency wallets...
WS-2019-0401
bitcoin-sweep is a malicious package which designed to find and exfiltrate cryptocurrency wallets...