Malicious code in rainbowcolors (PyPI)

Source: amazon-inspector c836e6786c8347157c05d664afcc653b445814cf73f36bc2a5157e41528ffbdd The package advertises itself as an ANSI-color helper but on Windows the first call to any Color method print/paint/call downloads an opaque executable solace.exe from an anonymous gofile.io file-share URL...

Malicious code in rainbowcolors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c836e6786c8347157c05d664afcc653b445814cf73f36bc2a5157e41528ffbdd The package advertises itself as an ANSI-color helper but on Windows the first call to any Color method print/paint/call downloads an opaque executab...

Malicious code in @apexacc/audit (npm)

@apexacc/audit is the companion package to @apexacc/cli in the "Apex Accelerator" campaign Elastic Security Labs REF8801, 2026-10-12. It exposes an MCP server with 18 "security tools" that all return fabricated output for example a fixed Slither report and a "NOT A HONEYPOT" verdict, registers...

MAL-2026-17923 Malicious code in @apexacc/audit (npm)

@apexacc/audit is the companion package to @apexacc/cli in the "Apex Accelerator" campaign Elastic Security Labs REF8801, 2026-10-12. It exposes an MCP server with 18 "security tools" that all return fabricated output for example a fixed Slither report and a "NOT A HONEYPOT" verdict, registers...

Malicious code in multer-orm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb45c09aa7a237b2b9ff18ccf6426b76a4f46e5ea665c7747f35a345940e161 multer-orm is a typosquat of the widely used multer middleware. Its README is copied from multer, but the package adds a load-time dropper in...

Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files

Cybersecurity researchers have discovered a new Raspberry Robin campaign wave that has been propagating the malware through malicious Windows Script Files WSFs since March 2024. "Historically, Raspberry Robin was known to spread through removable media like USB drives, but over time its...