ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

A threat actor known as ShadyPanda has been linked to a seven-year-long browser extension campaign that has amassed over 4.3 million installations over time. Five of these extensions started off as legitimate programs before malicious changes were introduced in mid-2024, according to a report fro...

EUVD-2025-198857

Malicious code in @quick-start-soft/quick-git-clean-markdown npm...

MAL-2025-190820 Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577d17cd2429a5652e40b47820dcf0d2effeaf1de1762f1ee7c8b3c14eeb7cb3 The package @quick-start-soft/quick-git-clean-markdown was found to contain malicious code. Source: ghsa-malware...

CVE-2025-12170

The Checkbox plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wpajaxnoprivcheckboxcleanlog' AJAX endpoint in all versions up to, and including, 2.8.10. This makes it possible for unauthenticated attackers to clear log files...

EUVD-2025-117491

Malicious code in clean-brown-shark npm...

EUVD-2025-106070

Malicious code in cleanminkz3n npm...

Malicious code in clean_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3cfeb9b106acf9ce6a268d98c16acde2a8b34c6b1823b173351bc2e4400d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106072

Malicious code in cleanalbatrossz3n npm...

EUVD-2025-92729

Malicious code in cleanechidnaz3n npm...

Malicious code in clean_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d892286bc24cffe4db62f6275939a5a2cdf66d433c365611ff214039301b4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79637

Malicious code in cleancardinalz3n npm...

EUVD-2025-82492

Malicious code in cleanmouse0xrequest npm...

EUVD-2025-64977

Malicious code in cleandovez3n npm...

EUVD-2025-64976

Malicious code in cleantyrannosaurusz3n npm...

EUVD-2025-64978

Malicious code in cleandolphinz3n npm...

EUVD-2025-86725

Malicious code in cleancheetahz3n npm...

EUVD-2025-55433

Malicious code in clean-ivory-chicken npm...

EUVD-2025-55435

Malicious code in clean-beige-rabbit npm...

EUVD-2025-55437

Malicious code in clean-apricot-bee npm...

Malicious code in clean-apricot-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dba1ca0b854348f73cde18ebc5d9ac69e278932bde2003c431311c8904f0d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...