Lucene search
+L

7 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/12 1:51 p.m.•26 views

Malicious code in @biz44/id79-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/08/19 9:13 a.m.•32 views

MAL-2026-14296 Malicious code in gfff5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f12f82dc8c54282b428617c03537a54f3361841b02233b6626eae6f1e8ec4ee gfff5 advertises itself as a 'System binary configuration tool' but its actual behavior is covert surveillance. When the CLI is invoked, index.js...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/19 2:50 a.m.•28 views

Malicious code in sysdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb784f77e0ba034d13e3ca39aa5f3f401ab659deaafbb0b28d880c21293bde33 The package is published as a 'System binary configuration tool' but its actual payload is a Windows surveillance harness. pointer.py registers globa...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/11 6:49 a.m.•28 views

Malicious code in sysnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac9873e59ffdf79c56fd4f9366b56e0532f87dc00c4380fae18d714785b0bc8 On require / CLI invocation, sysnu performs two install-time-equivalent actions on Windows hosts. First, if python is not on PATH, index.js lines 42-...

5.6AI score
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-6878

Malware in sbrugna...

7.8CVSS7.3AI score0.00518EPSS
SaveExploits0References4
The Hacker News
The Hacker News
•added 2023/04/03 9:20 a.m.•11 views

Crypto-Stealing OpcJacker Malware Targets Users with Fake VPN Service

A piece of new information-stealing malware called OpcJacker has been spotted in the wild since the second half of 2022 as part of a malvertising campaign. "OpcJacker's main functions include keylogging, taking screenshots, stealing sensitive data from browsers, loading additional modules, and...

6.9AI score
SaveExploits0
myhack58
myhack58
•added 2019/05/28 12:00 a.m.•333 views

Wary of the use of the Office vulnerabilities to spread commercial spyware AgentTesla-vulnerability warning-the black bar safety net

Background overview AgentTesla was originally a released in 2014 the simple key loggers, and in recent years its development team which constantly adds many new features, and sale. AgentTesla has now become a commercial spyware that can be controlled by the end of the generation to meet the...

9.3CVSS7.6AI score0.99945EPSS
SaveExploits33
Rows per page
Query Builder