Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in...

EUVD-2025-180280

Malicious code in astrophysics-mesosphere-neptunology-xml npm...

EUVD-2025-180514

Malicious code in acamar-postgres-gammarayburst-astrophysics npm...

EUVD-2025-176114

Malicious code in supernova-astrophysics-jekyll-webdriver-manager npm...

EUVD-2025-175759

Malicious code in ursa-readable-astrophysics-wolf npm...

EUVD-2025-180281

Malicious code in astrophysics-extremophile-library-bulma npm...

EUVD-2025-180532

Malicious code in abiogenesis-cluster-astrophysics-epigenetics npm...

EUVD-2025-176849

Malicious code in quasar-astrophysics-less-paleontology npm...

EUVD-2025-177675

Malicious code in nebula-lyra-astrophysics-backend npm...

EUVD-2025-176245

Malicious code in spinner-uranology-terser-astrophysics npm...

EUVD-2025-176614

Malicious code in rocket-jest-astrophysics-speleology npm...

EUVD-2025-176027

Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics npm...

EUVD-2025-176511

Malicious code in saturnology-fusion-kinetic-astrophysics npm...

EUVD-2025-176769

Malicious code in redis-astrophysics-astrophysics-webpack npm...

EUVD-2025-180279

Malicious code in astrophysics-prosthetics-callback-deneb npm...

EUVD-2025-179960

Malicious code in buffer-mocha-astrophysics-technosignature npm...

EUVD-2025-179411

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics npm...

EUVD-2025-179789

Malicious code in chakra-ui-test-quark-astrophysics npm...

EUVD-2025-178930

Malicious code in fermion-thermosphere-hawkingradiation-astrophysics npm...

EUVD-2025-178621

Malicious code in hadron-vuetify-astrophysics-prompts npm...