5966 matches found
Malicious Package
Overview chai-test-await is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Malicious Package
Overview cookie-validate is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Malicious Package
Overview react-svg-bundler is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Malicious Package
Overview cookie-breaker is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Malicious Package
Overview js-uponcaps is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...
North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware
The North Korean threat actors behind the Contagious Interview campaign have continued to flood the npm registry with 197 more malicious packages since last month. According to Socket, these packages have been downloaded over 31,000 times, and are designed to deliver a variant of OtterCookie that...
The vulnerability of Grub2 operating system loaders, related to incorrect buffer size calculations when processing received packets, allows attackers to cause service failures.
The vulnerability of Grub2 operating system loaders is related to incorrect calculation of buffer size during the processing of received packets. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the net_set_vlan() function in the Network loader module of the Grub2 operating system allows a hacker to cause a service failure.
The vulnerability of the netsetvlan function in the Network loader module of the Grub2 operating system is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the normal_exit() function in the Grub2 operating system loader allows a hacker to trigger a service failure.
The vulnerability of the normalexit function in the Grub2 operating system loader is related to the pointer being reclaimed after its expiration time has passed. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
The second wave of the Shai-Hulud supply chain attack has spilled over to the Maven ecosystem after compromising more than 830 packages in the npm registry. The Socket Research Team said it identified a Maven Central package named org.mvnpm:posthog-node:4.18.1 that embeds the same two components...
USN-7894-1: EDK II vulnerabilities
It was discovered that EDK II was susceptible to a predictable TCP Initial Sequence Number. An attacker could possibly use this issue to gain unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. CVE-2023-45236, CVE-2023-45237 It was discovered that EDK II...
When your AI Assistant Becomes the Attacker’s Command-and-Control
Earlier this month, Microsoft uncovered SesameOp, a new backdoor malware that abuses the OpenAI Assistants API as a covert command-and-control C2 channel. The discovery has drawn significant attention within the cybersecurity community. Security teams can no longer focus solely on endpoint malwar...
RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware
The threat actors behind a malware family known as RomCom targeted a U.S.-based civil engineering company via a JavaScript loader dubbed SocGholish to deliver the Mythic Agent. "This is the first time that a RomCom payload has been observed being distributed by SocGholish," Arctic Wolf Labs...
CLSA-2025-1764083719 qt5-qt3d: Fix of CVE-2025-11277
CVE-2025-11277: fix heap-based buffer overflow in Q3DImporter::InternReadFile function of Q3DLoader.cpp...
MAL-2025-191221 Malicious code in @fishingbooker/react-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a19dbfbd7292340e4857d9c40d537185efb1402a471df4b8346b4ae3575d3f The package @fishingbooker/react-loader was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199317
Malicious code in @fishingbooker/react-loader npm...
MAL-2025-191154 Malicious code in webpack-loader-httpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac614016dd648eebd83cab4f9c04585d52439a98b69d5e02694cb48119dfd96 The package webpack-loader-httpfile was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199194
Malicious code in webpack-loader-httpfile npm...
Malicious code in webpack-loader-httpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac614016dd648eebd83cab4f9c04585d52439a98b69d5e02694cb48119dfd96 The package webpack-loader-httpfile was found to contain malicious code. Source: ghsa-malware...