Malicious code in ctfepakageflgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb15daff30154b098e6c84f0b4c7de85afc9489566fdca3adc3013fd4034857 The package ctfepakageflgs was found to contain malicious code. Source: ghsa-malware bb83a42ae050458182d5e671b9ff648bf0eee356acb6684eac514c2144bf5683...

Yet another DCOM object for lateral movement

Introduction If you're a penetration tester, you know that lateral movement is becoming increasingly difficult, especially in well-defended environments. One common technique for remote command execution has been the use of DCOM objects. Over the years, many different DCOM objects have been...

Reports About Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

On December 10, Cisco became aware of a new cyberattack campaign targeting a limited subset of appliances with certain ports open to the internet that are running Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. This attack allows the threat actors to...

Malicious code in vitor-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bd6760c1b98479c10035033bae4ed585e80c762bf7fd4c79d45bdc990a852e The package vitor-js was found to contain malicious code. Source: ghsa-malware 59962d3857dd8e503c596b43fbb33337d27bea7c1f53e69a305e690913599163 Any...

📄 IGEL OS Workspace Edition 11.10.430 Persistent Payload

IGEL OS Workspace Edition version 11.10.430 contains a persistence mechanism that allows authenticated attackers with root access to establish persistent code execution through the system's registry configuration. The vulnerability leverages IGEL OS's custom registry system and mount point...

Exploit for Path Traversal in Rarlab Winrar

!Window...

MAL-2025-192598 Malicious code in bigmathlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e535ed570f999285684c4f2a79ce262d460a98329790e34f433542070b9298 The package bigmathlib was found to contain malicious code. Source: ghsa-malware d73c91abd6a323d119e598928fc613100786424177806e36bb5ebd15f666de3e Any...

Malicious code in openhands-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9 The package openhands-frontend was found to contain malicious code. Source: ghsa-malware...

Malicious code in nad-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34249dc2bb9d97e2f560efbcef33d2f0f0de8cb15f9c66a984697700d6b92d43 The package nad-home was found to contain malicious code. Source: ghsa-malware 5d84934ad23672579c5ab6e2f431b6f1b99a7a8f0e872a628503037c6298f8d4 Any...

MAL-2025-192587 Malicious code in elf-stats-aurora-cocoa-911 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce406834ac9b9cfddc78cc4259b1887fcbd907c2a007295cd47528f8f92deae The package elf-stats-aurora-cocoa-911 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192585 Malicious code in betterjsloggin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0ccde11f9011e9a5b0f96421a9d3088ed2f2604afdfc4f24d3753497729a06 The package betterjsloggin was found to contain malicious code. Source: ghsa-malware 9474602fb42d55f04ad6c25502fa73adc2f3313def621342428ea0b2f13c3d28...

Malicious code in @revvity-signals/chemdraw-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53a6ff6ab4af77539873f6d418625d58f5d11a3fedda42efb25b91585218bbf The package @revvity-signals/chemdraw-js was found to contain malicious code. Source: ghsa-malware...

Malicious code in iraza2-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7307c50f4f14642add677ac343109c8691dc3c5e67a0de88d27ed958e9593b The package iraza2-fca was found to contain malicious code. Source: ghsa-malware 5f0c32bd90ff347b69dae6471a8099e36ac566490bfa361193fc59f1c53785d4 Any...

Malicious code in cms_comp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7762e8867157bd05bfa8858e8f90ecd85ed0d6cf08c2435d264b9c61ad3420de The package cmscomp was found to contain malicious code. Source: ghsa-malware e58e38c37e8492486fd771954f0b1906c083a4dd5741600ca28a0bed5dd919a7 Any...

MAL-2025-192555 Malicious code in cms_comp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7762e8867157bd05bfa8858e8f90ecd85ed0d6cf08c2435d264b9c61ad3420de The package cmscomp was found to contain malicious code. Source: ghsa-malware e58e38c37e8492486fd771954f0b1906c083a4dd5741600ca28a0bed5dd919a7 Any...

MAL-2025-192565 Malicious code in sdbao-content-sems (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050ceeb8145a6cac66b0539a7be8d50c66979cd72b54055f3c49c0c40823fd6b The package sdbao-content-sems was found to contain malicious code. Source: ghsa-malware...

Malicious code in ffruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf46b55c70da3e5dad3896242df9922f032035d42c731e67dd91a38caf65daac The package ffruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192549 Malicious code in ffruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf46b55c70da3e5dad3896242df9922f032035d42c731e67dd91a38caf65daac The package ffruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in afruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36726b904c7ec2d58c9ade48fc63b898841138faa395862ae2a28be8e6701e0a The package afruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Persistent Backdoor Attacks under Continual Fine-Tuning of LLMs

Backdoor attacks embed malicious behaviors into Large Language Models LLMs, enabling adversaries to trigger harmful outputs or bypass safety controls. However, the persistence of the implanted backdoors under user-driven post-deployment continual fine-tuning has been rarely examined. Most prior...