Malicious code in verif8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3cab370a2507d947a2037dadffaa0ccc89a16b8c11965420f1d524af20359d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multichannelsender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652cee53031dd1163364e949f53d53bfd223787686037d765131e60bd7a6a254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3219 Malicious code in multichannelsender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652cee53031dd1163364e949f53d53bfd223787686037d765131e60bd7a6a254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in element-ui-locale-en (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65cfe05538769df2b22ed9c915a7d41c57874cd3671f5d9b9da0a63d201df3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3218 Malicious code in element-ui-locale-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5fceb0684e44fef543d79d4744dc2a8e652e74219d8ef07c317f2d3f1c40dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3220 Malicious code in verif8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3cab370a2507d947a2037dadffaa0ccc89a16b8c11965420f1d524af20359d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glog-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 971dcb9a7fdae650e637fc12c4045cf4c7e8cac575b4d6f6c18d93ba115e5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Crypto Developers Targeted by Python Malware Disguised as Coding Challenges

The North Korea-linked threat actor assessed to be behind the massive Bybit hack in February 2025 has been linked to a malicious campaign that targets developers to deliver new stealer malware under the guise of a coding assignment. The activity has been attributed by Palo Alto Networks Unit 42 t...

MAL-2025-3209 Malicious code in @talentai/carbon-addons-talent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882f23d36229f817eef192caf4e51f3164ffbd979660fa81389291a6b522e857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flex-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49eefd4354e4d8c5354eddd891739db212953f6cf5c4aa193bf5470a8e77c820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3211 Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps

Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a known Android malware called SpyNote. These bogus websites masquerade as Google Play Store install pages for apps like the Chrome web browser, indicating an...

MAL-2025-3207 Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cffc6b2ef3ee7169eb637677097e46e1f9c980cd6fd606d1b521830c2a8cc92b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in some-error-logging-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ec550029e2d4afb8e030a4f5d0f35eed74507e8c10420197915d518200ef38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sht-calculator-opener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51a9f888486fe75f13166070e6c817fc5cfae2087efb4bbb922233178b9381c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sharp-heic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db9ffb0551887208262a5445e00bde6f964551601c407e01dfd493ef1b144e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scatterpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4308e49dfcf49f89b83f3fb963bed64aed858409e2256b461e06686bbfbc616a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3197 Malicious code in scatterpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4308e49dfcf49f89b83f3fb963bed64aed858409e2256b461e06686bbfbc616a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phpseclib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd3395431636c655a702698158fa477a0bf450d74aebf99e31cfb5a9d0bdf383 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...