967 matches found
EUVD-2025-54598
Malicious code in entire-turquoise-rat npm...
Malicious code in breakable-scarlet-rat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d2e58b1de38ad7adf4f2acbbad20c827a8d095ad433e9a815ad295acf05edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-56026
Malicious code in active-jade-rat npm...
EUVD-2025-55731
Malicious code in back-red-rat npm...
EUVD-2025-54499
Malicious code in excited-silver-rat npm...
EUVD-2025-60200
Malicious code in developingratz3n npm...
EUVD-2025-49508
Malicious code in relatedratz3n npm...
EUVD-2025-50353
Malicious code in dramaticratz3n npm...
EUVD-2025-49436
Malicious code in saltyratz3n npm...
EUVD-2025-49635
Malicious code in plasticratz3n npm...
MAL-2025-61233 Malicious code in salty_rat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2dd59cf21d9dc60ef9ed675b5f6c17846fae2cc0e5f2aa50aa47760f4754773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-50725
Malicious code in aggressiveratz3n npm...
EUVD-2025-49644
Malicious code in persistentratz3n npm...
MAL-2025-59682 Malicious code in yearling_rat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135520a8d0efc3d15e09fc39ed0d8bbe8341d5ba03c0ede709f4fe61800972a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yearling_rat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135520a8d0efc3d15e09fc39ed0d8bbe8341d5ba03c0ede709f4fe61800972a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-48241
Malicious code in creepyratz3n npm...
ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising
The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same time, defenders face growing blind spots — from spoofed messages to large-scale social engineering. This week’s findings show how that...
Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT
The threat actors behind a malware family known as Winos 4.0 aka ValleyRAT have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan RAT tracked as HoldingHands RAT aka Gh0stBins. "The campaign relied on phishing emails with PDFs...