Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)

Hackers are using fake Microsoft Teams installers found in search results and ads to deploy the Oyster backdoor. Learn how to protect your PC from this remote-access threat...

Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @testcarrot/supply4

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @testcarrot/supply7

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-48102 Malicious code in @testcarrot/supply7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3fc279837edb0be645020c30f0d706a43f965e28e6efef716e2283301fe06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27039

Memory corruption may occur while processing IOCTL calls for DMM/WARPNCC CONFIG in Qualcomm chipsets. Affected component: DMM/WARPNCC IOCTL handling. Root cause: memory corruption leading to potential instability (no explicit exploit details). CVE notes MEDIUM severity (AV:L/AC:L/PR:L/UI:N/S:U/C:...

Is your computer mouse eavesdropping on you?

The short answer is: probably not, but theoretically it’s possible. Researchers at the University of California found a method they called Mic-E-Mouse, which turns your computer mouse into a spy that can listen in on your conversations. The method uses high-performance optical sensors in optical...

Malicious code in redirect-f1wut9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40b8c43103721f09fbd0c6ae769a14dac343523d48beb1494a934cafca750a99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-v74zee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb82dc8fa348e42a4e1260cd210adb1e29238ba2b0d7035b5e9257cb2038b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-w9cx9u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82ff558f1e1686cf6046bb0bbed08f411c888a5ec5764fd6f27dc630c6116b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in redirect-rc2ewa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in redirect-3viu68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241a41d0003d0cf1fa1c5cc576172322520772e7d459469dcbccf8423132d6f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48041 Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48059 Malicious code in redirect-ht8x82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296fb84ab1f2fb5c2b017998f89dde441a49c75b2d4e6849c2ae0a1e422470ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in redirect-x4imdv

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in redirect-dravb9

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-48051 Malicious code in redirect-ci4ynt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6192340fc5c992962663104944e345473999ca164f0e87b9edbc7ec0a6898e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sieve2workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d53786bf7b79fe2302460c7f8c369195321ca0da5736f4c4da00ca4a42a45529 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mkto-flow-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c904169f3ea79a27da86e03cee022e92ff39831a877f13f17594bfe89ffab7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...