Malicious code in @hongfangze/filestream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb8918dc757e8560ab3e6a414e7ce77f963e8f5a199d1b274ff4a402aabb9751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db133f41e9415e6a6e70862c87024ca08903312e01ae76b9d2968cab187e79a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a6ee6ea5b224ab24892e45f1a473b53c5fa5cf89b93c73a62688b2790eb9c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3053 Malicious code in @hongfangze/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa0305129280dcc792459235adfdc6136839cc43305dea19709f4970e9edc56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3035 Malicious code in @hongfangze/computer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f193d733695d36780af7e894963ab02c1590dba0234fd30623aa2ff3408b552d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3044 Malicious code in @hongfangze/guid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7220c6bb13c845faf097d4684a1e9ebf6bf2d825956bd8f565b996a804a193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa0305129280dcc792459235adfdc6136839cc43305dea19709f4970e9edc56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3055 Malicious code in @hongfangze/string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ee35af30acd3517cea9a097e00846a80a50fb6888854e7356c5175841b91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3036 Malicious code in @hongfangze/concurrent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78c38d6d5d1eebce6d9eca70a76746065dfff24d940d9f8143d7b3654605b635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor called Anubis not to be confused with an Android banking trojan of the same name that can grant them remote access to compromised Windows systems. "This malware allows attackers to execute remote shell...

MAL-2025-3032 Malicious code in @atulrv1day/unusedpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77df872b6f487ff391d16643aa0a160f89d08f54054931319a0bdb4bc172aaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3066 Malicious code in ehackify-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6b886d5c20d3c03f44c4900a8073d17e4871883be89a22c897197d0a5baecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3061 Malicious code in accountlifecycleserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16f34b0df0c6872e171130fd0bc4e705f393a5c3a6160b222dab34564f599b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accountlifecycleserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16f34b0df0c6872e171130fd0bc4e705f393a5c3a6160b222dab34564f599b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niji-react-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308202af28f18471be931243021c6ecf4079323996579d3da01c5b193e94bc7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niji-react-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17dc01f92bc84168459b0c07238c88fe320f39e19f59414a938a8ef55226045e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3072 Malicious code in mocha-appscan-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21793e2495135513c49a9203796dd0cd7f455829773a96ca4e1ba435705f1533 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkoutsellerplatserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ee286fa5544561b468d3ac01c5f000fbd2ffc8a1da55c3c4a5c2086b8b508d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3075 Malicious code in niji-react-collapsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45517acf73604f16c7460249b78bcf46b0da5988629d8b62e6abc9551f349eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niji-react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b0f37153a7862a4b1e5abd871385e93b6535a8bb834f03fc9bb83b9e7be6640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...