EUVD-2025-55387

Malicious code in cold-aqua-ferret npm...

EUVD-2025-51741

Malicious code in subjective-turquoise-ferret npm...

EUVD-2025-51653

Malicious code in surprising-tan-ferret npm...

EUVD-2025-52383

Malicious code in regulatory-fuchsia-ferret npm...

Malicious code in neighbouring-beige-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cff4bd786be4489b61a4a113e22319ebef104587b79c47918387801e82c8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53053

Malicious code in neighbouring-beige-ferret npm...

EUVD-2025-54479

Malicious code in expensive-emerald-ferret npm...

EUVD-2025-54867

Malicious code in disastrous-rose-ferret npm...

EUVD-2025-52428

Malicious code in realistic-lime-ferret npm...

EUVD-2025-51275

Malicious code in useful-cyan-ferret npm...

EUVD-2025-53912

Malicious code in hungry-gold-ferret npm...

EUVD-2025-55648

Malicious code in bloody-cyan-ferret npm...

EUVD-2025-51162

Malicious code in vocal-amethyst-ferret npm...

MAL-2025-67291 Malicious code in colossal-green-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987f041ff8a13fbc7a71c9fa79ea531ba748b9de99e30b1bfa9176384d8f3d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59594

Malicious code in forthcomingferretz3n npm...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: dbmate, spicedb-operator, fixuid, azure-ipam, kustomize, helm-set-status, falcoctl, fulcio, grpcurl, kubevela, mkcert, portieris, vault-k8s, azure-workload-identity-webhook, delve, kuberlr, cloud-provider-gcp-cloud-controller-manager, ferretdb, bom,...

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

Threat actors with ties to the Democratic People's Republic of Korea aka DPRK or North Korea have been observed leveraging ClickFix-style lures to deliver a known malware called BeaverTail and InvisibleFerret. "The threat actor used ClickFix lures to target marketing and trader roles in...

North Korean Hackers Deploy FERRET Malware via Fake Job Interviews on macOS

The North Korean threat actors behind the Contagious Interview campaign have been observed delivering a collection of Apple macOS malware strains dubbed FERRET as part of a supposed job interview process. "Targets are typically asked to communicate with an interviewer through a link that throws a...

ferret-news.com XSS vulnerability

Open Bug Bounty ID: OBB-691807 Description| Value ---|--- Affected Website:| ferret-news.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

MITMf - Framework for Man-In-The-Middle attacks

Framework for Man-In-The-Middle attacks Available plugins SMBtrap - Exploits the 'SMB Trap' vulnerability on connected clients Screenshotter - Uses HTML5 Canvas to render an accurate screenshot of a clients browser Responder - LLMNR, NBT-NS, WPAD and MDNS poisoner SSLstrip+ - Partially bypass...