TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclosed DarkSword exploit kit to target iOS devices. The activity has been attributed with high confidence to the Russian state-sponsored threat group known as...

EUVD-2025-177933

Malicious code in mdx-callisto-multiverse-achernar npm...

EUVD-2025-179888

Malicious code in callisto-sirius-farout-multiverse npm...

EUVD-2025-176776

Malicious code in redgiant-callisto-altair-npm npm...

EUVD-2025-179891

Malicious code in callisto-meissa-centaurus-sync npm...

EUVD-2025-179897

Malicious code in callisto-cors-ini-puppeteer npm...

EUVD-2025-177579

Malicious code in node-config-callisto-comet-eslint-plugin npm...

EUVD-2025-178167

Malicious code in lacerta-auth0-callisto-dorado npm...

EUVD-2025-178924

Malicious code in fetch-charon-callisto-meissa npm...

EUVD-2025-177694

Malicious code in nconf-aurora-ionosphere-callisto npm...

EUVD-2025-177445

Malicious code in ophiuchus-callisto-semantic-ui-lynx npm...

EUVD-2025-179893

Malicious code in callisto-hyperion-dactyl-equinox npm...

EUVD-2025-180329

Malicious code in ariel-callisto-commitlint-config-angular-install npm...

EUVD-2025-178614

Malicious code in halley-paleoceanography-mui-callisto npm...

EUVD-2025-179895

Malicious code in callisto-europa-buffer-nodemon npm...

Malicious code in callisto-europa-buffer-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f44ccada191c2458e1ca5eb15a396e16cbb99112184ce38c1fe81ce1a0e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179896

Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...

EUVD-2025-179890

Malicious code in callisto-module-module-antares npm...

EUVD-2025-177843

Malicious code in middleware-exec-callisto-postcss-loader npm...

EUVD-2025-179809

Malicious code in ceres-petrology-callisto-shelljs npm...