A week in security (July 27 – August 2)

Last week on Malwarebytes Labs: Fake Fortnite rewards are stealing players’ accounts Fake Flash Player installs AtlasRAT Malwarebytes for Windows, now available on the Microsoft Store Hims & Hers sued over alleged health data privacy failures Hidden prompt turns Microsoft Copilot into an AI worm...

Fake Fortnite rewards are stealing players’ accounts

Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs. One version promises $50 from a fake superhero collaboration. Another claims it can calculate what your locker is worth. Both lead to the same destination: a fake Epic Game...

EUVD-2025-37148

Malicious code in epic-fortnite-build npm...

EUVD-2025-37146

Malicious code in epic-fortnite-server npm...

Malicious code in epic-fortnite-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba7791618c9fd4cc17f357dcb22ec2541afaceaa77c10b3c2c41da844d9205 The package epic-fortnite-build was found to contain malicious code...

EUVD-2025-37147

Malicious code in epic-fortnite-react npm...

MAL-2025-49146 Malicious code in epic-fortnite-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd945fe892d9bf48afabd6e04f49c68c332391d1b4e3b3d92acec73b4e6f6da The package epic-fortnite-react was found to contain malicious code...

Malicious code in epic-fortnite-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e616a8873cb7c4eb6d86f24e1be4453b4fd29da0e7cf5cbcbc2d3ff54f6ebf The package epic-fortnite-server was found to contain malicious code...

MAL-2025-49145 Malicious code in epic-fortnite-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba7791618c9fd4cc17f357dcb22ec2541afaceaa77c10b3c2c41da844d9205 The package epic-fortnite-build was found to contain malicious code...

Malicious code in epic-fortnite-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd945fe892d9bf48afabd6e04f49c68c332391d1b4e3b3d92acec73b4e6f6da The package epic-fortnite-react was found to contain malicious code...

Malicious code in epic-fortnite-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec12a2963a01211f4bcc3d1d1ad779f842b987405ca597a857f4283adcc6389f The package epic-fortnite-styles was found to contain malicious code...

EUVD-2025-37145

Malicious code in epic-fortnite-styles npm...

MAL-2025-49148 Malicious code in epic-fortnite-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec12a2963a01211f4bcc3d1d1ad779f842b987405ca597a857f4283adcc6389f The package epic-fortnite-styles was found to contain malicious code...

MAL-2025-49147 Malicious code in epic-fortnite-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e616a8873cb7c4eb6d86f24e1be4453b4fd29da0e7cf5cbcbc2d3ff54f6ebf The package epic-fortnite-server was found to contain malicious code...

Malicious code in working-fortnite-vbucks-gener-tor-2023-fejzkdlz (npm)

The package working-fortnite-vbucks-gener-tor-2023-fejzkdlz was found to contain malicious code...

Malicious code in 13500-free-fortnite-v-bucks-updated-dkdzk (npm)

The package 13500-free-fortnite-v-bucks-updated-dkdzk was found to contain malicious code...

Malicious code in 2023-fortnite-free-v-bucks-and-skins-updated-dklzd (npm)

The package 2023-fortnite-free-v-bucks-and-skins-updated-dklzd was found to contain malicious code...

Malicious code in gi-ft-ca-rds-fortnite-2023-zdkzld (npm)

The package gi-ft-ca-rds-fortnite-2023-zdkzld was found to contain malicious code...

Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm)

The package fortnite-free-gi-ft-car-ds-2023 was found to contain malicious code...

MAL-2025-45302 Malicious code in new-fortnite-v-bucks-and-skins-for-free-dyjuter (npm)

The package new-fortnite-v-bucks-and-skins-for-free-dyjuter was found to contain malicious code...