Malicious code in node-xpnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f358100a356075faa746b4929e5c4afd67b681e4fd85dd4e8d570af09aae4da The package node-xpnav was found to contain malicious code. Source: ghsa-malware ecad27e5e27726e4839a252c295fcd6d7a77504b7f74944706a47f7bb2a715cb Any...

Malicious code in tailwind-fa-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756b361c16672e64c2930a0808516a83e75a9b441f30ac8e9e933a2b0a89858 The package tailwind-fa-bridge was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49354 Malicious code in tailwind-fa-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756b361c16672e64c2930a0808516a83e75a9b441f30ac8e9e933a2b0a89858 The package tailwind-fa-bridge was found to contain malicious code. Source: ghsa-malware...

Malicious code in jsonretype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5153794835635057bad05300635360b4d6601aee683831850a767d139b4dbc The package jsonretype was found to contain malicious code. Source: ghsa-malware 95bc6e978289ad50ccb9d7e8a9656e9324b18e7d85d9765ac24a158b7d6e8a5e Any...

SesameOp: Novel backdoor uses OpenAI Assistants API for command and control

Microsoft Incident Response – Detection and Response Team DART researchers uncovered a new backdoor that is notable for its novel use of the OpenAI Assistants Application Programming Interface API as a mechanism for command-and-control C2 communications. Instead of relying on more traditional...

MAL-2025-49321 Malicious code in axis-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...

MAL-2025-49324 Malicious code in make-vis-flexible (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4b327a21d49613743c6cd4f96d8eeee813ad7a28252373da14202debcf4712 The package make-vis-flexible was found to contain malicious code. Source: ghsa-malware...

Malicious code in orderly-network-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49328 Malicious code in parallel-coordinates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a6532ff0ec9ac1daec9c21c05c508de189c1f5d5012fc6b8aee4feb9ce2b43 The package parallel-coordinates was found to contain malicious code. Source: ghsa-malware...

Malicious code in monophonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638fb2d3ef5574e603743a5f8545f9bd01c8d2f544f628cbe041b12a94497155 The package monophonic was found to contain malicious code. Source: ghsa-malware 7a86916baf347f5489f90e15cce360f5a7bea0ba71f59130e66754f1c4acec9a Any...

MAL-2025-49329 Malicious code in react-ui-animates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49323 Malicious code in kingasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06cea57ed478ce7d494e8daba01d75b4c47a41bf4cc2bcce462a405cd46ea1a4 The package kingasd was found to contain malicious code. Source: ghsa-malware 13d287b8649f8ab3c2db046c9db2af68601de7e168725a1440764bd4f6c03400 Any...

OESA-2025-2557 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: This vulnerability affects Firefox versions prior to 143 and Firefox ESR versions prior to 140.3. Specific vulnerability type and impact details require further confirmation.CVE-2025-10527 This vulnerability affects...

Malicious code in icon-react-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...

MAL-2025-49272 Malicious code in telegram-bot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6146ccba5593f3f123cbe20b94fd9df9d168c3e4614e5bf93a1fdd8e96fc7d The package telegram-bot-starter was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49254 Malicious code in cursor-ai-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbd361c113d7d9176c54442b50ef54297ec337dc805f6ec21d0e275b187d05 The package cursor-ai-fork was found to contain malicious code. Source: ghsa-malware 77f90740d80a74fd38f9815f98257a414e78aa314b00b1a75f4d56352d972811...

Malicious code in fork-spoon-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230cc34701f276fd7c72ba75f580a0615bc12a6720dd3bedb7d98b99b24651c5 The package fork-spoon-fork was found to contain malicious code. Source: ghsa-malware 0e5798d27152d0cd13a2c05a43a6ffd1ec5ee70023bbffc173181ec3ecee8e3...

Malicious code in web3-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c652a3b11d35f64a6e471fa1fadb5523c045ce3708e327d390c5cee28941a The package web3-wc was found to contain malicious code. Source: ghsa-malware f5ac56c88955ce71a2cb673c8d49d38f9e97e6af8e0f9a60969d0fd3d511586e Any...

Malicious code in react-icon-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8ba17d7a373063f5a6120fd27a52bb855006bd5f440ee5d2f287cccaeb6bd5 The package react-icon-pkg was found to contain malicious code. Source: ghsa-malware ce6d8c074bdec68ae646e31b821c3896f805e01c46c5464e8db624d09e133205...

MAL-2025-49261 Malicious code in icon-react-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...