MAL-2025-33742 Malicious code in spica-heka-fetch-quasar (npm)

The package spica-heka-fetch-quasar was found to contain malicious code...

Malicious code in fornax-stream-spica-janus (npm)

The package fornax-stream-spica-janus was found to contain malicious code...

MAL-2025-33741 Malicious code in spica-figures-tool-kardashevscale (npm)

The package spica-figures-tool-kardashevscale was found to contain malicious code...

MAL-2025-29646 Malicious code in primatology-hyperion-superposition-spica (npm)

The package primatology-hyperion-superposition-spica was found to contain malicious code...

MAL-2025-15709 Malicious code in bionics-lightyear-changelog-spica (npm)

The package bionics-lightyear-changelog-spica was found to contain malicious code...

MAL-2025-15492 Malicious code in baryon-spica-async-bootstrap (npm)

The package baryon-spica-async-bootstrap was found to contain malicious code...

MAL-2025-20799 Malicious code in fornax-stream-spica-janus (npm)

The package fornax-stream-spica-janus was found to contain malicious code...

MAL-2025-16720 Malicious code in centaurus-spica-fermiparadox-odin (npm)

The package centaurus-spica-fermiparadox-odin was found to contain malicious code...

MAL-2025-29124 Malicious code in phenomic-spica-augmentedreality-eslint-plugin (npm)

The package phenomic-spica-augmentedreality-eslint-plugin was found to contain malicious code...

Malicious code in centaurus-spica-fermiparadox-odin (npm)

The package centaurus-spica-fermiparadox-odin was found to contain malicious code...

Malicious code in baryon-spica-async-bootstrap (npm)

The package baryon-spica-async-bootstrap was found to contain malicious code...

Malicious code in spica-remark-prompts-phoenix (npm)

The package spica-remark-prompts-phoenix was found to contain malicious code...

MAL-2025-33740 Malicious code in spica-commitlint-tailwindcss-terser-webpack-plugin (npm)

The package spica-commitlint-tailwindcss-terser-webpack-plugin was found to contain malicious code...

Malicious code in spica-heka-fetch-quasar (npm)

The package spica-heka-fetch-quasar was found to contain malicious code...

Malicious code in cressida-geodynamo-nova-spica (npm)

The package cressida-geodynamo-nova-spica was found to contain malicious code...

MAL-2025-17680 Malicious code in cressida-geodynamo-nova-spica (npm)

The package cressida-geodynamo-nova-spica was found to contain malicious code...

MAL-2025-22292 Malicious code in hawkingradiation-jupiter-pulsar-spica (npm)

The package hawkingradiation-jupiter-pulsar-spica was found to contain malicious code...

MAL-2025-38450 Malicious code in virgo-got-sass-loader-spica (npm)

The package virgo-got-sass-loader-spica was found to contain malicious code...

MAL-2025-33743 Malicious code in spica-remark-prompts-phoenix (npm)

The package spica-remark-prompts-phoenix was found to contain malicious code...

Coldriver threat group targets high-ranking officials to obtain credentials

Researchers at Google’s Threat Analysis Group TAG have published their findings about a group they have dubbed Coldriver. The main targets of the Coldriver group are high-profile individuals in non-governmental organizations NGOs, former intelligence and military officials, and NATO governments...