43078 matches found
MAL-2025-192948 Malicious code in extrazip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...
Malicious code in extrazip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...
China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
A China-linked advanced persistent threat APT group has been attributed to a highly-targeted cyber espionage campaign in which the adversary poisoned Domain Name System DNS requests to deliver its signature MgBot backdoor in attacks targeting victims in Tรผrkiye, China, and India. The activity,...
IoT Hack
Someone hacked an Italian ferry. It looks like the malware was installed by someone on the ferry, and not remotely...
๐ Backdoor.Win32.ControlTotal.t Hardcoded-Password Backdoor
This tool was design to leverage a hardcoded password backdoor in Backdoor.Win32.ControlTotal.t to simulate communications with the malware. ============================================================================================================================================= | Title :...
The vulnerability of the Malcure Malware Scanner plugin in the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the Malcure Malware Scanner plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
๐ Backdoor.Win32.Poison.jh Remote File Hijack
This code represents an educational Metasploit module concept that demonstrates how insecure file permissions created Backdoor.Win32.Poison.jh could be abused to achieve code execution. The scenario assumes that the malware drops an executable file inside a protected Windows directory SysWOW64 wi...
๐ Backdoor.Win32.Poison.jh Insecure File Permissions / Privilege Escalation
This python script demonstrates a local privilege escalation exploit targeting a vulnerability in the Backdoor.Win32.Poison.jh malware sample. The exploit leverages insecure file permissions created by the malware itself, allowing any local user to replace the malicious executable with arbitrary...
Malicious code in adril7123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c158e65a09b5e455b852acb29ec1b107df59e30a6b3760fdbf3272532b64d2 The package adril7123 was found to contain malicious code. Source: ghsa-malware 94f91e9ba95b42dff0bf2cb7a9885e66ce64b1ff324967c5ed24203322917e15 Any...
Malicious code in secguest-react-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab99d9a667e9700bb0176dde546ff3748b742775ea322766035a730391891 The package secguest-react-lib was found to contain malicious code. Source: ghsa-malware...
LLM-Driven Feature-Level Adversarial Attacks on Android Malware Detectors
The rapid growth in both the scale and complexity of Android malware has driven the widespread adoption of machine learning ML techniques for scalable and accurate malware detection. Despite their effectiveness, these models remain vulnerable to adversarial attacks that introduce carefully crafte...
ESET Threat Report H2 2025
This is the H2 2025 issue of the ESET Threat Report. It covers everything from AI malware to NFC threat trends. The threat statistics and trends presented in this report are based on global telemetry data from ESET...
MAL-2025-192752 Malicious code in @google_recaptcha/js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0346120a6f0d866aebe59ca9ae06c02e28849fc3840a412edcc81a2ab54ded The package @googlerecaptcha/js was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192761 Malicious code in supply_chain_dummy_test_2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...
Malicious code in supply_chain_dummy_test_1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427c02751dbaf2ec96a9818919ef225ce09a1017b33a494163746cce09acbad2 The package supplychaindummytest1 was found to contain malicious code. Source: ghsa-malware...
Malicious code in dotjsenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199e0e242516cf235f3d4f4d7b7921f7b52573e674bd76da515939782a81c153 The package dotjsenv was found to contain malicious code. Source: ghsa-malware b4dd239728dde802ec7a7aadd85d2a9f1c5c3e8b83e5f19b92a2afab16d1cd1c Any...
Malicious code in chai-async-chains (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfd7db9210fae054def8abcb6989e1158a4774dbec18c08ac6eebcbf95ef753 The package chai-async-chains was found to contain malicious code. Source: ghsa-malware...
Malicious code in lotusbail (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f2dbbd6b5a88d7702bb519fe20f7f45ab5c4cf430900ca16912d055a6e2f3b The package lotusbail was found to contain malicious code. Source: ghsa-malware 9a89a3feaf56d39c9a953fb5de2e0f4ae6176dce75ee9d95baddc8ef83e59b91 Any...
Malicious code in huangmingming-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b1eeb67a3d88661777e42783fdb91d2347376e8c6eae10588f559642d2bf53 The package huangmingming-demo was found to contain malicious code. Source: ghsa-malware...