North Korean APT43 Uses PowerShell and Dropbox in Targeted South Korea Cyberattacks

A nation-state threat actor with ties to North Korea has been linked to an ongoing campaign targeting South Korean business, government, and cryptocurrency sectors. The attack campaign, dubbed DEEPDRIVE by Securonix, has been attributed to a hacking group known as Kimsuky, which is also tracked...

CVE-2024-49607

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...

Malicious code in dropbox-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9caae36a2824571fd25ea7bbd865ce6077410002b5011e825d2877095d171a40 The OpenSSF Package Analysis project identified 'dropbox-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-441 Malicious code in dropbox-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9caae36a2824571fd25ea7bbd865ce6077410002b5011e825d2877095d171a40 The OpenSSF Package Analysis project identified 'dropbox-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aec1934d02825dd997f79de8c8dd0dc5d7d02a9a9bbdb024fbe0e87474660fa The OpenSSF Package Analysis project identified 'dropbox-user' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-440 Malicious code in dropbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aec1934d02825dd997f79de8c8dd0dc5d7d02a9a9bbdb024fbe0e87474660fa The OpenSSF Package Analysis project identified 'dropbox-user' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04b993977d88af38e781275c092c32e4a7e501af8a473cd7ca89289327052b44 The OpenSSF Package Analysis project identified 'dropbox-test' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-437 Malicious code in dropbox-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04b993977d88af38e781275c092c32e4a7e501af8a473cd7ca89289327052b44 The OpenSSF Package Analysis project identified 'dropbox-test' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b91e399de2020315c4cb5a23b17d10a7d6a0e882e45bb2bb92a92ce4d9b59b3 The OpenSSF Package Analysis project identified 'dropbox-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-438 Malicious code in dropbox-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b91e399de2020315c4cb5a23b17d10a7d6a0e882e45bb2bb92a92ce4d9b59b3 The OpenSSF Package Analysis project identified 'dropbox-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c179b3f5aca1f8765f782d15c2cd61ba18191a371bf5bb6ee4f52543dec51dff The OpenSSF Package Analysis project identified 'dropbox-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-439 Malicious code in dropbox-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c179b3f5aca1f8765f782d15c2cd61ba18191a371bf5bb6ee4f52543dec51dff The OpenSSF Package Analysis project identified 'dropbox-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-435 Malicious code in dropbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afdb751e57da5540b343e220fab07e5aa40ad53e4bf33fbadb1e8f53d8469261 The OpenSSF Package Analysis project identified 'dropbox-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afdb751e57da5540b343e220fab07e5aa40ad53e4bf33fbadb1e8f53d8469261 The OpenSSF Package Analysis project identified 'dropbox-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e77ce2fd7298faebe08ecd823f0705a710d5aa18d8b81252b08f843ea7ccda2 The OpenSSF Package Analysis project identified 'dropbox-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-436 Malicious code in dropbox-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e77ce2fd7298faebe08ecd823f0705a710d5aa18d8b81252b08f843ea7ccda2 The OpenSSF Package Analysis project identified 'dropbox-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 354ecda67f801f9b4cc23fae184e1fd2632d0c6970bb7d4190c00c514816a80f The OpenSSF Package Analysis project identified 'dropbox-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-431 Malicious code in dropbox-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 354ecda67f801f9b4cc23fae184e1fd2632d0c6970bb7d4190c00c514816a80f The OpenSSF Package Analysis project identified 'dropbox-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-428 Malicious code in dropbox-jira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a16e8de4a1868b669337f57422a85d6ecc5afd129e72189183739aabd92d46b The OpenSSF Package Analysis project identified 'dropbox-jira' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-jira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a16e8de4a1868b669337f57422a85d6ecc5afd129e72189183739aabd92d46b The OpenSSF Package Analysis project identified 'dropbox-jira' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...