14572 matches found
Malicious code in just-a-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b3b6dacc63b42851c61ae55e5168dbd9ff40172851cbfa980f489da54826f7 The package just-a-calculator was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview just-a-calculator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Attackers are using “Sneaky 2FA” to create fake sign-in windows that look real
Attackers have a new trick to steal your username and password: fake browser pop-ups that look exactly like real sign-in windows. These “Browser-in-the-Browser” attacks can fool almost anyone, but a password manager and a few simple habits can keep you safe. Phishing attacks continue to evolve, a...
We opened a fake invoice and fell down a retro XWorm-shaped wormhole
Somebody forwarded an “invoice” email and asked me to check the attachment because it looked suspicious. Good instinct—it was, and what we found inside was a surprisingly old trick hiding a modern threat. What it does If the recipient had opened the attached Visual Basic Script .vbs file, it woul...
CVE-2025-12872
The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL...
CVE-2025-12870
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...
CVE-2025-12871
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...
Malicious code in mlokok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb17455f65253ba6be5fab612a797aa6f0433340a49ab2fdfcc8da3e2b595f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlokok-lofei-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b321b72ebcdbe6ffd99acc812534d90b178c328d151618b7d81112a98de416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlook-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9b5a7dfff6237a039094d2e2adf4b39a2bc4a3c6455d6e0c36b361b6b24230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84119092b3a8966c43f09ffb7dbf6bbe86ba409a52f94d25f5e88ea79daf69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in imalok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d74b001422dfb69cf1a9df82c264d2ec65893db4edac2e3475812a5837fc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137415
Malicious code in imalok-ofe-a npm...
EUVD-2025-134927
Malicious code in a-pem-misa npm...
Malicious code in kisut-fafunig-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf33d71b8a5bd4ffb25a0d71666b0dedffc0f19b9f3467800845a6aaddd5f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134428
Malicious code in kisut-faig-a npm...
EUVD-2025-134479
Malicious code in kisut-fafnig-a npm...
Malicious code in a-pem-misa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ceef2f7df03c24fc249dcfbd60e7876462e0f5ee7c613d84dff849cae53728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...