MAL-2025-17719 Malicious code in crsrinf (npm)

The package crsrinf was found to contain malicious code...

MAL-2025-31793 Malicious code in react-googleplaces-component (npm)

The package react-googleplaces-component was found to contain malicious code...

MAL-2025-7932 Malicious code in @erboladaiteas/voluptatem-ipsam (npm)

The package @erboladaiteas/voluptatem-ipsam was found to contain malicious code...

MAL-2025-37610 Malicious code in uisomaker (npm)

The package uisomaker was found to contain malicious code...

MAL-2025-26199 Malicious code in mercahnt (npm)

The package mercahnt was found to contain malicious code...

MAL-2025-35102 Malicious code in test-mlw2-coals-gaumy (npm)

The package test-mlw2-coals-gaumy was found to contain malicious code...

FakeUpdates, Remcos, AgentTesla Top Malware Charts in Stealth Attack Surge

Check Point's April 2025 malware report reveals increasingly sophisticated and hidden attacks using familiar malware like FakeUpdates, Remcos,…...

Malicious code in testidneel-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d741fc56c242ce7ac9590ccfe8a91cb20e28e9e9a3fdc9ac721258723cc082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RUSTSEC-2023-0104 `littest` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the malicious user http-tiny and contained a malware payload in build.rs to exfiltrate host information to the attacker. This advisory is to retrospectively document this attempted attack. The version information and download...

A week in security (April 3 - 9)

Last week on Malwarebytes Labs: TikTok: Whats going on and should I be worried? Super FabriXss: an RCE vulnerability in Azure Service Fabric Explorer Big changes to Twitter verification: How to spot a verified account New macOS malware steals sensitive info, including a user's entire Keychain...

Malicious code in ntczkvywafpuijdq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e31fb770f7f63896d081debb55ed8dea9c7f8f66ce63348f0d818582eb66ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yamoney-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9e670fec6f7f4065772b1e70d90e98e7ba2ae864da9de9757b37d7be6adfbf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A week in security (February 10 – 16)

Last week on Malwarebytes Labs, we explained how to battle online coronavirus scams with facts, discussed the persistent re-infection techniques of Android/Trojan.xHelper and how to remove it, provided cyber tips for safe online dating, and showed how Hollywood teaches us misleading cybersecurity...

Presenting: Malwarebytes Labs 2017 State of Malware Report

2017 was a tumultuous year in politics, media, gender, race—and cybersecurity didn’t beat the rap. Last year was full of twists and turns in the cybercrime world, with major outbreaks, new infection methods, and the evolution of the cryptocurrency crime industry. In aiming to make sense of the...

Latest TeslaCrypt Targets New File Extensions, Invests Heavily in Evasion

TeslaCrypt, like many of its ransomware cousins, doesn’t sleep on past success. Researchers at Endgame Inc., have found two updates for the cryptoransomware in the past two weeks that invest heavily in obfuscation and evasion techniques, and also target a host of new file extensions. These sample...