TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclosed DarkSword exploit kit to target iOS devices. The activity has been attributed with high confidence to the Russian state-sponsored threat group known as...

EUVD-2025-178685

Malicious code in got-callisto-whitedwarf-gammarayburst npm...

EUVD-2025-177843

Malicious code in middleware-exec-callisto-postcss-loader npm...

EUVD-2025-177445

Malicious code in ophiuchus-callisto-semantic-ui-lynx npm...

EUVD-2025-177694

Malicious code in nconf-aurora-ionosphere-callisto npm...

EUVD-2025-179896

Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...

EUVD-2025-177359

Malicious code in paleomagnetism-callisto-areology-exec npm...

EUVD-2025-176776

Malicious code in redgiant-callisto-altair-npm npm...

EUVD-2025-180329

Malicious code in ariel-callisto-commitlint-config-angular-install npm...

EUVD-2025-177740

Malicious code in mui-norma-callisto-terser-webpack-plugin npm...

EUVD-2025-176348

Malicious code in slides-callisto-algol-sagitta npm...

MAL-2025-186020 Malicious code in castor-callisto-miranda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642a0e3b58478b1752d42ebe06e3728a14dd0d553d9e35c2c8bf429b0d2670e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179894

Malicious code in callisto-europa-relay-bootes npm...

EUVD-2025-178614

Malicious code in halley-paleoceanography-mui-callisto npm...

EUVD-2025-177162

Malicious code in pipe-astrophysics-astroinformatics-callisto npm...

EUVD-2025-179895

Malicious code in callisto-europa-buffer-nodemon npm...

EUVD-2025-179890

Malicious code in callisto-module-module-antares npm...

EUVD-2025-179180

Malicious code in electron-nconf-callisto-flare npm...

EUVD-2025-175407

Malicious code in zephyr-prettier-sequelize-callisto npm...

Malicious code in tool-callisto-betelgeuse-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014b72f48d0cdf678c671d8bba429cf7ad5630d66432049d24216676d7ba809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...