MAL-2025-25023 Malicious code in leadconduit-facebook (npm)

The package leadconduit-facebook was found to contain malicious code...

MAL-2025-17440 Malicious code in como-hackear-un-facebook (npm)

The package como-hackear-un-facebook was found to contain malicious code...

MAL-2025-19719 Malicious code in episode-free-gems-passes-tool-home-facebook (npm)

The package episode-free-gems-passes-tool-home-facebook was found to contain malicious code...

Malicious code in como-hackear-un-facebook (npm)

The package como-hackear-un-facebook was found to contain malicious code...

Malicious code in facebook-chat-api-deku (npm)

The package facebook-chat-api-deku was found to contain malicious code...

MAL-2025-19630 Malicious code in emoji-configsource-facebook (npm)

The package emoji-configsource-facebook was found to contain malicious code...

MAL-2025-20143 Malicious code in facebook-chat-api-deku (npm)

The package facebook-chat-api-deku was found to contain malicious code...

Malicious code in emoji-configsource-facebook (npm)

The package emoji-configsource-facebook was found to contain malicious code...

MAL-2025-14638 Malicious code in api-chat-fanpage-facebook (npm)

The package api-chat-fanpage-facebook was found to contain malicious code...

MAL-2025-9146 Malicious code in @oraliepham/api-chat-fanpage-facebook (npm)

The package @oraliepham/api-chat-fanpage-facebook was found to contain malicious code...

MAL-2025-9234 Malicious code in @phamton/api-chat-fanpage-facebook (npm)

The package @phamton/api-chat-fanpage-facebook was found to contain malicious code...

Netflix Job Phishing Scam Steals Facebook Login Data

Beware of fake Netflix job offers! A new phishing campaign is targeting job seekers, using fraudulent interviews to…...

Netflix scammers target jobseekers to trick them into handing over their Facebook logins

In what seems a phishing attack targeted at a certain audience, scammers are impersonating Netflix and reaching out to marketing staff. The initial mail looks like what you might expect from a headhunter or a human resources HR recruitment specialist. "I hope this note finds you well," the email...

Malicious code in facebook-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0ca4dfebc7839330f25a231f2f87af41aef50ea715541751bef46a1709f045e The OpenSSF Package Analysis project identified 'facebook-for-woocommerce' @ 3.6.6 npm as malicious. It is considered malicious because: - The...

MAL-2025-6824 Malicious code in facebook-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0ca4dfebc7839330f25a231f2f87af41aef50ea715541751bef46a1709f045e The OpenSSF Package Analysis project identified 'facebook-for-woocommerce' @ 3.6.6 npm as malicious. It is considered malicious because: - The...

Adult sites trick users into Liking Facebook posts using a clickjack Trojan

As the use of age verification to access adult websites increases in various countries around the world, shady websites with adult content have started a timely malware-fueled campaign to promote links to their own websites. During our daily rounds on Facebook, looking for the latest scams, we...

Facebook users targeted in ‘login’ phish

A few weeks ago we warned our readers of a phishing campaign targeting Instagram users that didn’t resort to the usual links to phishing websites, but used mailto: links instead. Now, it seems that these scammers have turned their attention to Facebook users. It works like this: The target receiv...

Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps

Cybersecurity researchers are calling attention to an ongoing campaign that distributes fake cryptocurrency trading apps to deploy a compiled V8 JavaScript JSC malware called JSCEAL that can capture data such as credentials and wallets. The activity leverages thousands of malicious advertisements...

CVE-2025-51397

A stored cross-site scripting XSS vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Surname parameter under the Recipient' Lists...

CVE-2025-51398

A stored cross-site scripting XSS vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...