📄 Backdoor.Win32.Poison.jh Remote File Hijack

This code represents an educational Metasploit module concept that demonstrates how insecure file permissions created Backdoor.Win32.Poison.jh could be abused to achieve code execution. The scenario assumes that the malware drops an executable file inside a protected Windows directory SysWOW64 wi...

📄 Backdoor.Win32.Poison.jh Insecure File Permissions / Privilege Escalation

This python script demonstrates a local privilege escalation exploit targeting a vulnerability in the Backdoor.Win32.Poison.jh malware sample. The exploit leverages insecure file permissions created by the malware itself, allowing any local user to replace the malicious executable with arbitrary...

Malicious code in adril7123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c158e65a09b5e455b852acb29ec1b107df59e30a6b3760fdbf3272532b64d2 The package adril7123 was found to contain malicious code. Source: ghsa-malware 94f91e9ba95b42dff0bf2cb7a9885e66ce64b1ff324967c5ed24203322917e15 Any...

Malicious code in secguest-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab99d9a667e9700bb0176dde546ff3748b742775ea322766035a730391891 The package secguest-react-lib was found to contain malicious code. Source: ghsa-malware...

LLM-Driven Feature-Level Adversarial Attacks on Android Malware Detectors

The rapid growth in both the scale and complexity of Android malware has driven the widespread adoption of machine learning ML techniques for scalable and accurate malware detection. Despite their effectiveness, these models remain vulnerable to adversarial attacks that introduce carefully crafte...

ESET Threat Report H2 2025

This is the H2 2025 issue of the ESET Threat Report. It covers everything from AI malware to NFC threat trends. The threat statistics and trends presented in this report are based on global telemetry data from ESET...

MAL-2025-192752 Malicious code in @google_recaptcha/js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0346120a6f0d866aebe59ca9ae06c02e28849fc3840a412edcc81a2ab54ded The package @googlerecaptcha/js was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192761 Malicious code in supply_chain_dummy_test_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in supply_chain_dummy_test_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427c02751dbaf2ec96a9818919ef225ce09a1017b33a494163746cce09acbad2 The package supplychaindummytest1 was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotjsenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199e0e242516cf235f3d4f4d7b7921f7b52573e674bd76da515939782a81c153 The package dotjsenv was found to contain malicious code. Source: ghsa-malware b4dd239728dde802ec7a7aadd85d2a9f1c5c3e8b83e5f19b92a2afab16d1cd1c Any...

Malicious code in chai-async-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfd7db9210fae054def8abcb6989e1158a4774dbec18c08ac6eebcbf95ef753 The package chai-async-chains was found to contain malicious code. Source: ghsa-malware...

Malicious code in lotusbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f2dbbd6b5a88d7702bb519fe20f7f45ab5c4cf430900ca16912d055a6e2f3b The package lotusbail was found to contain malicious code. Source: ghsa-malware 9a89a3feaf56d39c9a953fb5de2e0f4ae6176dce75ee9d95baddc8ef83e59b91 Any...

Malicious code in huangmingming-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b1eeb67a3d88661777e42783fdb91d2347376e8c6eae10588f559642d2bf53 The package huangmingming-demo was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192924 Malicious code in u2f_client (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192883 Malicious code in varshade-afc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c090ef4ab6892af3d5f4b03ce4af456c7a50f5aa6411bfe1644ce3772a2407c The package varshade-afc was found to contain malicious code...

MAL-2025-192872 Malicious code in sturdyfetch3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51688b3b85839d3b57f16cceb31d5a8eea4de19c3d9ad73395386c9a7b0ef1ca The package sturdyfetch3 was found to contain malicious code...

MAL-2025-192731 Malicious code in ddos-turbo-ecma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e64d8018dea45c4a342b7a09a99624a70f6db77000f42f534bc8df62b09c72f The package ddos-turbo-ecma was found to contain malicious code...

MAL-2025-192714 Malicious code in bignumberx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373a71b85072c46f30d8c905a20be254d540302a332c6cae5663cb76e4b8b620 The package bignumberx was found to contain malicious code...

RealDefense SUPERAntiSpyware 安全漏洞

RealDefense SUPERAntiSpyware is a security tool for detecting and removing malware from RealDefense USA. A security vulnerability exists in RealDefense SUPERAntiSpyware that stems from SAS Core Service exposing dangerous functions that could lead to local elevation of privilege...

RealDefense SUPERAntiSpyware 安全漏洞

RealDefense SUPERAntiSpyware is a security tool for detecting and removing malware from RealDefense USA. A security vulnerability exists in RealDefense SUPERAntiSpyware that stems from SAS Core Service exposing dangerous functions that could lead to local elevation of privilege...