MAL-2025-14400 Malicious code in alphard-ganymede-xanadu-apollo (npm)

The package alphard-ganymede-xanadu-apollo was found to contain malicious code...

MAL-2025-20585 Malicious code in firebase-babel-apollo-dotenv-safe (npm)

The package firebase-babel-apollo-dotenv-safe was found to contain malicious code...

MAL-2025-39874 Malicious code in xml-apollo-writable-heka (npm)

The package xml-apollo-writable-heka was found to contain malicious code...

MAL-2025-39491 Malicious code in writable-apollo-command-cryptography (npm)

The package writable-apollo-command-cryptography was found to contain malicious code...

MAL-2025-16695 Malicious code in cdo-apollo-server (npm)

The package cdo-apollo-server was found to contain malicious code...

MAL-2025-14658 Malicious code in apollo-spectron-cladistics-geochemistry (npm)

The package apollo-spectron-cladistics-geochemistry was found to contain malicious code...

MAL-2025-25765 Malicious code in magellan-prompts-wormhole-apollo (npm)

The package magellan-prompts-wormhole-apollo was found to contain malicious code...

MAL-2025-19924 Malicious code in event-on-apollo-vortex (npm)

The package event-on-apollo-vortex was found to contain malicious code...

MAL-2025-28032 Malicious code in oberon-blaze-apollo-pegasus (npm)

The package oberon-blaze-apollo-pegasus was found to contain malicious code...

MAL-2025-17194 Malicious code in cluster-babel-apollo-cors (npm)

The package cluster-babel-apollo-cors was found to contain malicious code...

MAL-2025-14653 Malicious code in apollo-auriga-eslint-config-version (npm)

The package apollo-auriga-eslint-config-version was found to contain malicious code...

MAL-2025-14781 Malicious code in archaeoastronomy-hugo-playwright-apollo (npm)

The package archaeoastronomy-hugo-playwright-apollo was found to contain malicious code...

MAL-2025-26221 Malicious code in metabolomics-apollo-brane-thermochronology (npm)

The package metabolomics-apollo-brane-thermochronology was found to contain malicious code...

MAL-2025-39753 Malicious code in xerxes-apollo-antares-proxima (npm)

The package xerxes-apollo-antares-proxima was found to contain malicious code...

MAL-2025-25586 Malicious code in loop-apollo-canopus-inquirer (npm)

The package loop-apollo-canopus-inquirer was found to contain malicious code...

MAL-2025-29305 Malicious code in pino-pretty-webdriver-manager-apollo-init (npm)

The package pino-pretty-webdriver-manager-apollo-init was found to contain malicious code...

MAL-2025-31807 Malicious code in react-native-apollo-upload-client (npm)

The package react-native-apollo-upload-client was found to contain malicious code...

MAL-2025-14657 Malicious code in apollo-regulus-commitizen-webdriverio (npm)

The package apollo-regulus-commitizen-webdriverio was found to contain malicious code...

⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Malware isn’t just trying to hide anymore—it’s trying to belong. We’re seeing code that talks like us, logs like us, even documents itself like a helpful teammate. Some threats now look more like developer tools than exploits. Others borrow trust from open-source platforms, or quietly build...

CVE-2025-53709

Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments. Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily...