TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclosed DarkSword exploit kit to target iOS devices. The activity has been attributed with high confidence to the Russian state-sponsored threat group known as...

EUVD-2025-177162

Malicious code in pipe-astrophysics-astroinformatics-callisto npm...

EUVD-2025-180329

Malicious code in ariel-callisto-commitlint-config-angular-install npm...

EUVD-2025-179895

Malicious code in callisto-europa-buffer-nodemon npm...

EUVD-2025-175407

Malicious code in zephyr-prettier-sequelize-callisto npm...

EUVD-2025-177694

Malicious code in nconf-aurora-ionosphere-callisto npm...

EUVD-2025-177579

Malicious code in node-config-callisto-comet-eslint-plugin npm...

EUVD-2025-177445

Malicious code in ophiuchus-callisto-semantic-ui-lynx npm...

EUVD-2025-176348

Malicious code in slides-callisto-algol-sagitta npm...

EUVD-2025-178924

Malicious code in fetch-charon-callisto-meissa npm...

EUVD-2025-179896

Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...

EUVD-2025-179897

Malicious code in callisto-cors-ini-puppeteer npm...

EUVD-2025-179891

Malicious code in callisto-meissa-centaurus-sync npm...

EUVD-2025-179889

Malicious code in callisto-proxima-command-loglevel npm...

EUVD-2025-177044

Malicious code in process-callisto-superagent-quark npm...

EUVD-2025-179892

Malicious code in callisto-hyperion-norma-firebase npm...

EUVD-2025-179862

Malicious code in castor-callisto-miranda-quasar npm...

EUVD-2025-177843

Malicious code in middleware-exec-callisto-postcss-loader npm...

EUVD-2025-179888

Malicious code in callisto-sirius-farout-multiverse npm...

Malicious code in lacerta-auth0-callisto-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11064afceb6e678c2829e4532c2a26703f08758ccc1c624ce372d6c569a19665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...