58 matches found
EUVD-2025-55587
Malicious code in brief-silver-mite npm...
MAL-2025-67059 Malicious code in brief-bronze-clownfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556577ff2fa6488cbaed42bd13ccf406ceae7fd8ee8bb96292d3d307ca748668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55592
Malicious code in brief-aquamarine-planarian npm...
EUVD-2025-55591
Malicious code in brief-blush-guineafowl npm...
Malicious code in brief-coral-tortoise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d6ae84abe6e7eda359884f6366ebfbf0697d69ff0166cf351c0b03c352a3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55586
Malicious code in brief-white-alligator npm...
EUVD-2025-55590
Malicious code in brief-bronze-clownfish npm...
EUVD-2025-55588
Malicious code in brief-red-warbler npm...
Malicious code in brief-white-alligator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-62118 Malicious code in brief_harrier_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5af18f7c910b05288216d80c07ce21a0152a089cac5bb01d2fa42c8c073697b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-60520
Malicious code in briefharrierz3n npm...
EUVD-2025-48556
Malicious code in briefwaspz3n npm...
Malicious code in test-mlw2-snags-fomes-brief-polks (npm)
The package test-mlw2-snags-fomes-brief-polks was found to contain malicious code...
Malicious code in @malware-test-brief-ilium-huffy-tangi/test-mlw3-brief-ilium-huffy-tangi (npm)
The package @malware-test-brief-ilium-huffy-tangi/test-mlw3-brief-ilium-huffy-tangi was found to contain malicious code...
MAL-2025-36265 Malicious code in test-mlw2-snags-fomes-brief-polks (npm)
The package test-mlw2-snags-fomes-brief-polks was found to contain malicious code...
CVE-2025-30406
creationtimestamp| type| source ---|---|--- 2025-04-03 19:35:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10326 2025-04-03 21:06:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmf36672w 2025-04-03 23:36:28+00:00| seen| https://t.me/cvedetector/22026 2025-04-04...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713link is external Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550link is external Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883lin...
CVE-2024-0132
creationtimestamp| type| source ---|---|--- 2024-09-26 08:46:30+00:00| seen| https://t.me/cvedetector/6385 2024-09-27 09:03:26+00:00| seen| https://t.me/KomunitiSiber/2638 2024-09-27 11:57:43+00:00| seen| Telegram/RuAQlUKocXlT4ofSDLT3CByJGT5eproP32lBf1VKLLCew 2024-09-27 11:57:44+00:00| seen|...
Informational: Impact of Malicious Code in XZ Tools and Libraries (CVE-2024-3094)
The Palo Alto Networks Product Security Assurance team has evaluated the supply chain compromise impacting versions 5.6.0 and 5.6.1 of XZ tools and libraries. These versions of the software may allow unauthorized access to affected systems. Based on the information presently known, Palo Alto...
Ransomware gangs and Living Off the Land (LOTL) attacks: A deep dive
We’ve told you about ransomware-as-a-service RaaS gangs; we’ve told you about living off the Land LOTL attacks. What do you get when you bring the two together? Bad news. Our recent report, Threat Brief: Ransomware Gangs & Living Off the Land Attacks, takes a deep dive into why the intersection o...