Hackers Exploit Vercel GenAI to Mass-Produce Convincing Phishing Sites

Hackers are abusing Vercel GenAI to create convincing phishing sites that mimic major brands, including Microsoft, Adidas, and Nike, making scams harder to detect...

Friday Squid Blogging: New “Squid” Sneaker

I did not know Adidas sold a sneaker called "Squid." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

EUVD-2014-6873

Malware in sbrugna...

Adidas Confirms Cyber Attack, Customer Data Stolen

Adidas confirms cyber attack compromising customer data, joining other major retailers targeted by advanced threats and rising cybersecurity risks...

CVE-2019-8289

Vulnerability in Online Store v1.0, stored XSS in admin/userview.php adidasmemberemail variable...

Malicious code in mc5-adidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a619866ee93765f22dfe1769c8a926d1b67e44fee683bd4cdf8d2da2b9a47f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2776 Malicious code in mc5-adidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a619866ee93765f22dfe1769c8a926d1b67e44fee683bd4cdf8d2da2b9a47f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-155 Malicious code in adidas-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28226fc9d38372cbe92f7985bb3e187f7c0b05278acac32be1d2bbfaf7cda2e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adidas-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28226fc9d38372cbe92f7985bb3e187f7c0b05278acac32be1d2bbfaf7cda2e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adidas-data-mesh/consumer-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdc1beaa9fe8440ba69a69eea5a7a92bc1a37479f9bf0c3f0fed177d303befaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7907 Malicious code in @adidas-data-mesh/consumer-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdc1beaa9fe8440ba69a69eea5a7a92bc1a37479f9bf0c3f0fed177d303befaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adidas-data-mesh/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7906 Malicious code in @adidas-data-mesh/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adidas-data-mesh/common-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ce6b2f5a21d37c95f132da06bc595d120ec7c4aed20d1d4d517a51d85db6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7872 Malicious code in @adidas-data-mesh/common-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ce6b2f5a21d37c95f132da06bc595d120ec7c4aed20d1d4d517a51d85db6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brand-adidas-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e16fae72fd3726263d7bfa2f1c164b7d4100f89931856c163e37c534feb1a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1367 Malicious code in brand-adidas-asset-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b2e8dbb891acdef0e8c7d2e97c0b27c3e6e9d4fb4ff284fa0d9542acb2c893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1368 Malicious code in brand-adidas-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e16fae72fd3726263d7bfa2f1c164b7d4100f89931856c163e37c534feb1a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brand-adidas-asset-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b2e8dbb891acdef0e8c7d2e97c0b27c3e6e9d4fb4ff284fa0d9542acb2c893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adidas-data-mesh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdd001e6013b356683b2fea45497d02787519396582fbe22102e0618a79380fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...