Malicious Package

Overview json-map-source is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

How attackers use real IT tools to take over your computer

A new wave of attacks is exploiting legitimate Remote Monitoring and Management RMM tools like LogMeIn Resolve formerly GoToResolve and PDQ Connect to remotely control victims’ systems. Instead of dropping traditional malware, attackers trick people into installing these trusted IT support progra...

Malicious Package

Overview ddos-l7 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Reverse Engineering and Control-Aware Security Analysis of the ArduPilot UAV Framework

Unmanned Aerial Vehicle UAV technologies are gaining high interest for many domains, which makes UAV security of utmost importance. ArduPilot is among the most widely used open-source autopilot UAV frameworks; yet, many studies demonstrate the vulnerabilities affecting such systems. Vulnerabiliti...

Constructing and Benchmarking: A Labeled Email Dataset for Text-Based Phishing and Spam Detection Framework

Phishing and spam emails remain a major cybersecurity threat, with attackers increasingly leveraging Large Language Models LLMs to craft highly deceptive content. This study presents a comprehensive email dataset containing phishing, spam, and legitimate messages, explicitly distinguishing betwee...

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

MAL-2025-191814 Malicious code in perfviewer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea912a2de677fa6d9ea6dbf9a792dace4d927efd46a5cb615ba8548fec4930e8 During installation, code downloads and starts an executable and a DLL library. After starting them, files are removed from the disk. The executable has been...

Malicious code in xsltproc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9038d06e907a027d385f7ef9111815ca61e7b26fce85196a549c20e02447adc4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in python-rootpath (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb867560d676e7b79ce110b230906a9630feb223cbcb6072bff5a2636c60a3c7 Hidden code downloads, saves and import a remote script. The package itself is a clone of a legitimate "rootpath". At the time of analysis, the remote script d...

EUVD-2025-117271

Malicious code in legitimate-sapphire-snipe npm...

EUVD-2025-117272

Malicious code in legitimate-magenta-mole npm...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138831 Malicious code in legitimate-sapphire-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb442d7e77a075510fa58f4d1e91597d9277c0b4301b571c098f7a36dced6f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74497

Malicious code in legitimatenightingaleivory-43 npm...

EUVD-2025-78916

Malicious code in legitimatefrogz3n npm...

EUVD-2025-63334

Malicious code in legitimatecoralz3n npm...

EUVD-2025-63332

Malicious code in legitimateroadrunnerrequirement npm...

EUVD-2025-53542

Malicious code in legitimate-chocolate-hummingbird npm...

EUVD-2025-53541

Malicious code in legitimate-crimson-walrus npm...

MAL-2025-69108 Malicious code in legitimate-crimson-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e25c58eca5f74cb2ae8d108780cc99d510b1fb1d36c9bcc64d3aea0638dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...