Malicious code in fox-grove-eyi798-project (npm)

The package fox-grove-eyi798-project was found to contain malicious code...

Malicious code in fox-rose-jzq209-project (npm)

The package fox-rose-jzq209-project was found to contain malicious code...

MAL-2025-20826 Malicious code in fox-cloud-mjp330-project (npm)

The package fox-cloud-mjp330-project was found to contain malicious code...

MAL-2025-20830 Malicious code in fox-grove-eyi798-project (npm)

The package fox-grove-eyi798-project was found to contain malicious code...

MAL-2025-40584 Malicious code in yonder-fox-kwk428-project (npm)

The package yonder-fox-kwk428-project was found to contain malicious code...

MAL-2025-20840 Malicious code in fox-undertow-wmc930-project (npm)

The package fox-undertow-wmc930-project was found to contain malicious code...

MAL-2025-20828 Malicious code in fox-eagle-qrz110-project (npm)

The package fox-eagle-qrz110-project was found to contain malicious code...

MAL-2025-20834 Malicious code in fox-mist-jeo648-project (npm)

The package fox-mist-jeo648-project was found to contain malicious code...

MAL-2025-20842 Malicious code in fox-utopia-omi519-project (npm)

The package fox-utopia-omi519-project was found to contain malicious code...

MAL-2025-20839 Malicious code in fox-tundra-vjc448-project (npm)

The package fox-tundra-vjc448-project was found to contain malicious code...

MAL-2025-20838 Malicious code in fox-thunder-hlv017-project (npm)

The package fox-thunder-hlv017-project was found to contain malicious code...

MAL-2025-21433 Malicious code in giraffe-fox-qok168-project (npm)

The package giraffe-fox-qok168-project was found to contain malicious code...

MAL-2025-20825 Malicious code in fox-arctic-qmu744-project (npm)

The package fox-arctic-qmu744-project was found to contain malicious code...

Malicious code in fathom-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1e7b59b9f2a49b04dac133e2367b50305f8105cbc53e45be4db10e1107daf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6159 Malicious code in fathom-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1e7b59b9f2a49b04dac133e2367b50305f8105cbc53e45be4db10e1107daf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Iranian-Backed Pay2Key Ransomware Resurfaces with 80% Profit Share for Cybercriminals

An Iranian-backed ransomware-as-a-service RaaS named Pay2Key has resurfaced in the wake of the Israel-Iran-U.S. conflict last month, offering bigger payouts to cybercriminals who launch attacks against Israel and the U.S. The financially motivated scheme, now operating under the moniker...

Silver Fox APT Targets Taiwan with Complex Gh0stCringe and HoldingHands RAT Malware

Cybersecurity researchers are warning of a new phishing campaign that's targeting users in Taiwan with malware families such as HoldingHands RAT and Gh0stCringe. The activity is part of a broader campaign that delivered the Winos 4.0 malware framework earlier this January by sending phishing...

CVE-2025-5155

A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/admin/controller/Article.php. The manipulation of the argument ids leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2024-1497

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form widget addr2width attribute in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-7778

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.10.36 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access...