EUVD-2025-16782

Malicious code in bioql PyPI...

EUVD-2023-26531

Malicious code in bioql PyPI...

EUVD-2021-30363

Malicious code in bioql PyPI...

EUVD-2022-32610

Malicious code in bioql PyPI...

EUVD-2023-30710

Malicious code in bioql PyPI...

EUVD-2022-39116

Malicious code in bioql PyPI...

EUVD-2021-28134

Malicious code in bioql PyPI...

EUVD-2022-51118

Malicious code in bioql PyPI...

EUVD-2022-42403

Malicious code in bioql PyPI...

EUVD-2023-35774

Malicious code in bioql PyPI...

EUVD-2021-30908

Malicious code in bioql PyPI...

EUVD-2021-8092

Malicious code in bioql PyPI...

EUVD-2021-8136

Malicious code in bioql PyPI...

EUVD-2021-31075

Malicious code in bioql PyPI...

EUVD-2021-8034

Malicious code in bioql PyPI...

MAL-2025-191712 Malicious code in d1snakegame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8023a44d657b04f09628c938fa7fb4fbd8c1300f630aff31837b32f2337ce65f The package starts a Discord bot that waits for messages and automatically executes any file sent as an attachment, effectively turning the package into a RAT...

Malicious code in d1snakegame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8023a44d657b04f09628c938fa7fb4fbd8c1300f630aff31837b32f2337ce65f The package starts a Discord bot that waits for messages and automatically executes any file sent as an attachment, effectively turning the package into a RAT...

Scam Facebook groups send malicious Android malware to seniors

An infostealer and banking Trojan rolled into one is making the rounds in Facebook groups aimed at "active seniors". Attackers used social engineering methods to lure targets into joining fake Facebook groups that appeared to promote travel and community activities—such as trips, dance classes, a...

sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

...

New Android Banking Trojan "Klopatra" Uses Hidden VNC to Control Infected Smartphones

A previously undocumented Android banking trojan called Klopatra has compromised over 3,000 devices, with a majority of the infections reported in Spain and Italy. Italian fraud prevention firm Cleafy, which discovered the sophisticated malware and remote access trojan RAT in late August 2025, sa...