MAL-2025-3488 Malicious code in doges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 318e443cd5d84f016e8bfb0f1d2bafd4ccc2749c5ba81e01f0175207db159d06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testdoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042d70fcdce39518a09164e3d86d8403a4de0ad9697aee15c56f3fc289985a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3503 Malicious code in testdoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042d70fcdce39518a09164e3d86d8403a4de0ad9697aee15c56f3fc289985a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3394 Malicious code in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9185919557abcee7240fb59e33b1628a6396ee77926b4fd8716571e40bf04d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae7b1f7fe219acd6c836c06592e9b86119b37abe839810b895444e5353af436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3075ed01e988b75ffe573ce85b459ad0e7a1f3a4811aeff563b24af9d9ee54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9185919557abcee7240fb59e33b1628a6396ee77926b4fd8716571e40bf04d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3389 Malicious code in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae7b1f7fe219acd6c836c06592e9b86119b37abe839810b895444e5353af436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3390 Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3392 Malicious code in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423ed02534dc5f69e700f584aa2650eeb9221a31037dbeb366660c166801552d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f5b903af0837bff399f0cd318f2e34983b7fdb935b44b8e599047ce1b417b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3297 Malicious code in keypair-encryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02f1145632762977fc8763c9f6ee3f5c9272b45196357654217a1bc1ce13bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3697 Malicious code in poc-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc002dd617428d821e25cfa749908affae826cf40db7db85821cb7e344418ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted social engineering operations, per Volexity...

Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

The Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users' private keys. The malicious activity has been found to affect five different versions of the package:...

Malicious code in windpapi-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c10d90b2a66383524d744c13f47a50a2d7dc178d14e8dd14e6167636c4f09f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3290 Malicious code in nsdhqhlqqka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f13c553d9b4b49c22bdffaa566e85eafa6970dedeab6c7f1102dfbe4bc70d60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3294 Malicious code in windpapi-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c10d90b2a66383524d744c13f47a50a2d7dc178d14e8dd14e6167636c4f09f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quaoqpdizoqsqdqsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f1f9340c89842abcbd40ae92859a72850ca38d95401add0c0bf3591b5ab8e8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...