507 matches found
Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
A previously undocumented Linux implant codenamed Quasar Linux RAT QLNX is targeting developers' systems to establish a silent foothold as well as facilitate a broad range of post-compromise functionality, such as credential harvesting, keylogging, file manipulation, clipboard monitoring, and...
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities
TrendAI™ Research breaks down Quasar Linux QLNX, a previously undocumented sophisticated Linux RAT with low detection rates. In this blog, we examine a full-featured Linux threat incorporating a rootkit, a PAM backdoor, credential harvesting, and more, revealing how this malware enables stealthy...
Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware
Security experts have disclosed details of an active malware campaign that's exploiting a DLL side-loading vulnerability in a legitimate binary associated with the open-source c-ares library to bypass security controls and deliver a wide range of commodity trojans and stealers. "Attackers achieve...
Space Bears Ransomware Claims Comcast Data Theft Through Quasar Breach
Space Bears ransowmare claims it obtained Comcast files through a breach at Quasar Inc, with threats to publish the data and separate leaks promised from Quasar itself...
EUVD-2025-178146
Malicious code in leda-loopback-markdown-pdf-quasar npm...
EUVD-2025-176845
Malicious code in quasar-element-ui-radioastronomy-ganymede npm...
Malicious code in vulcan-quasar-prettier-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565ba49afcf1a59bba550526acc4bf8556d6fb903b6c4f4e3ee0b7f79d2944a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179185
Malicious code in elara-triton-quasar-async npm...
EUVD-2025-179816
Malicious code in centaurus-quasar-module-rimraf npm...
EUVD-2025-179782
Malicious code in chalk-paleontology-quasar-taurus npm...
EUVD-2025-177718
Malicious code in mysql-quasar-nodejs-node-sass npm...
EUVD-2025-176100
Malicious code in superposition-quasar-iota-mysql npm...
Malicious code in quasar-capella-bootstrap-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bc1b439777658c1074981b53aaec6921f57e4b6f74d04257402b16d4c5734a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xenon-command-futurology-quasar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180266
Malicious code in async-iota-pavo-quasar npm...
EUVD-2025-176848
Malicious code in quasar-auth-spectron-thuban npm...
EUVD-2025-177131
Malicious code in playwright-quasar-tachyon-thuban npm...
EUVD-2025-178097
Malicious code in lightyear-cors-quasar-procyon npm...