MAL-2025-41009 Malicious code in zip-mp3-a-lbum-do-wnload-new-482338-deceivers-0nx6u-qtwkft (npm)

The package zip-mp3-a-lbum-do-wnload-new-482338-deceivers-0nx6u-qtwkft was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn (npm)

The package zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn was found to contain malicious code...

MAL-2025-41005 Malicious code in zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl (npm)

The package zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl was found to contain malicious code...

MAL-2025-20541 Malicious code in file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe (npm)

The package file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa (npm)

The package mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui (npm)

The package mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmr (npm)

The package zip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmr was found to contain malicious code...

MAL-2025-41015 Malicious code in zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr (npm)

The package zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr was found to contain malicious code...

MAL-2025-41011 Malicious code in zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz (npm)

The package zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz was found to contain malicious code...

MAL-2025-41008 Malicious code in zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt (npm)

The package zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt was found to contain malicious code...

MAL-2025-20540 Malicious code in file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj (npm)

The package file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj was found to contain malicious code...

A Comprehensive Analysis of HijackLoader and its Infection Chain

A Comprehensive Analysis of HijackLoader and Its Infection Chain By Ryan Weil · August 14, 2025 Initial contact Dodi Repacks is a website that distributes pirated games. The site is listed as safe/trusted on various piracy forums, and users say that "as long as you have an adblocker installed suc...

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2011-10016

CVE-2011-10016 affects Real Networks Netzip Classic 7.5.1.86. A stack-based buffer overflow occurs while parsing a specially crafted ZIP archive, triggered by a file name exceeding the expected buffer size. Exploitation allows arbitrary code execution under the victim user's context when the ZIP ...

CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2025-45317

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...

Directory Traversal

Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Directory Traversal via the model loading process. An attacker can execute arbitrary code and tamper with data by supplying a .nemo file containing maliciously crafted metadata...

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious activities on infected systems,...

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious activities on infected systems,...