MAL-2025-68238 Malicious code in famous-jade-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af02a777541e8ef50ea260abbeba7c5220e0a1a3224f2d8fc92e4566697f3651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-amethyst-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2c9db650a85b46fc895fc53ab529c8788b568164b17c32b094fb718bd8aab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54411

Malicious code in famous-jade-felidae npm...

EUVD-2025-54414

Malicious code in famous-aquamarine-unicorn npm...

Malicious code in famous-aquamarine-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0725abbf8ef50cf834e20056cc79d960e5884cbc25681243a2383f61bba797f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54412

Malicious code in famous-cyan-crayfish npm...

EUVD-2025-54413

Malicious code in famous-coral-fly npm...

EUVD-2025-54415

Malicious code in famous-amethyst-coyote npm...

EUVD-2025-54410

Malicious code in famous-red-stoat npm...

EUVD-2025-50220

Malicious code in famousswordtailz3n npm...

EUVD-2025-50221

Malicious code in famoushippopotamusz3n npm...

BeaverTail and OtterCookie evolve with a new Javascript module

Cisco Talos has uncovered a new attack linked to Famous Chollima, a threat group aligned with North Korea DPRK. This group is known for impersonating hiring organizations to target job seekers, tricking them into installing information-stealing malware to obtain cryptocurrency and user credential...

Famous Chollima deploying Python version of GolangGhost RAT

In May 2025, Cisco Talos identified a Python-based remote access trojan RAT we call "PylangGhost," used exclusively by a North Korean-aligned threat actor. PylangGhost is functionally similar to the previously documented GolangGhost RAT, sharing many of the same capabilities. In recent campaigns,...

North Korean Hackers Target Developers with Malicious npm Packages

Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, indicating "coordinated and relentless" efforts to target developers with malware and steal cryptocurrency assets. The latest wave, which was observed between August 12 and 27,...

famous-design.com Cross Site Scripting vulnerability OBB-3500979

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

famous-comics.com Cross Site Scripting vulnerability OBB-3299957

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

famous-alumni.com Cross Site Scripting vulnerability OBB-2691040

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Friday Squid Blogging: COVID Relief Funds

A town in Japan built a giant squid statue with its COVID relief grant. One local told the Chunichi Shimbun newspaper that while the statue may be effective in the long run, the money could have been used for "urgent support," such as for medical staff and long-term care facilities. But a...

SQL Injection Vulnerability in Website Building System of Famous Torch Enterprise Management (Shanghai) Co.

Ltd, founded in 2005, is a domestic enterprise IT application service operator. A SQL injection vulnerability exists in the website building system of Famous Torch Enterprise Management Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Famous Torch Enterprise Management (Shanghai) Company Limited (CNVD-2020-23814)

Ltd. is a technology-based company that provides Internet application services for enterprise informatization construction. A SQL injection vulnerability exists in the website building system of Famous Torch Enterprise Management Shanghai Co. Ltd, which can be exploited by attackers to obtain...