CISA and Partners Release Update to Malware Analysis Report BRICKSTORM Backdoor

Today, the Cybersecurity and Infrastructure Security Agency CISA, National Security Agency, and Canadian Centre for Cyber Security released an update to the Malware Analysis Report BRICKSTORM Backdoor with indicators of compromise IOCs and detection signatures for additional BRICKSTORM samples...

MAL-2025-192622 Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

Malicious Package

Overview chai-as-awaited is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192628 Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-cocoa-workshop-459 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f3da17da5b5a6cbb8124715f6d31867664acc26b4bbbe8537ba02c9dc9677 The package elf-stats-cocoa-workshop-459 was found to contain malicious code. Source: ghsa-malware...

Malicious code in smm-youtube (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4dd42b2e1f7dbb24d9031965f83d092b8bb933a52d57fd41846f2434b3ec007 The package smm-youtube was found to contain malicious code. Source: ghsa-malware df910dbfab34e87cf538e77e445f1e2d6add23671c18dd9ecead9e25f2aca789 An...

MAL-2025-192645 Malicious code in vdous (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287389231a3c89843cda42ba76c0357e0f1e933cd479a9e12621a250e7014980 The package vdous was found to contain malicious code. Source: ghsa-malware db289bbb4a097deab7e11457a14affb9e2579bda9632d94fba4110f60b48ae63 Any...

Malicious code in viktorparserctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d19b02e0dd824034939772d72a2d958ea2a56c76ea311de8a51aab01e29911 The package viktorparserctf was found to contain malicious code. Source: ghsa-malware e4ba3aabc4f98b1f2b7b53bccd9cbaa880ad68a212b2a6780bd1a8a7e912706...

Malicious code in viktorparserctf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b7bb5e0b1f8fa179dfab5781def80ab5479ef699c58edf3b1e998c8fe7228f The package viktorparserctf2 was found to contain malicious code. Source: ghsa-malware 1b82b1d902169dd21a91960198cb2313aeea0d1a5d0db64c81d289a9632cd5...

Malicious code in viktor-xml-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f588bf6164c41e993943c30ac7d1a25c88c3de79469bb1a5d1a8a43448f22c31 The package viktor-xml-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in viktorparserctf5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c79dee4e3a36c67bd12a6cc3f0578d4eb4fe75dd92e3dde8aae08ce646fee The package viktorparserctf5 was found to contain malicious code. Source: ghsa-malware 49d2b2440876d75785bb3d21a9f41cb3226ab45155823ae19b472b367e993b...

MAL-2025-192649 Malicious code in viktorparserctf3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c2840e0c17dd93d7212fbf45f44cc176dab955745be97cc722dbf28f642cbd The package viktorparserctf3 was found to contain malicious code. Source: ghsa-malware 70fd554f1378b0035e48dd211debb57d92eb88e7548b4e441993571ffd7b89...

MAL-2025-192654 Malicious code in viktorparserctf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e1243238b2a1eade50d8bcfebe117fd9f3090271497fce1f9d1e2798abeaa4 The package viktorparserctf8 was found to contain malicious code. Source: ghsa-malware 610271459dc452bb1384a92a84e0e37bd11f3d688166faa2ee174e81fdaf8a...

MAL-2025-192647 Malicious code in viktorparserctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d19b02e0dd824034939772d72a2d958ea2a56c76ea311de8a51aab01e29911 The package viktorparserctf was found to contain malicious code. Source: ghsa-malware e4ba3aabc4f98b1f2b7b53bccd9cbaa880ad68a212b2a6780bd1a8a7e912706...

MAL-2025-192625 Malicious code in cursorparserfruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a22e5c321410a329554b1e1f84c5e7971d06bdded434ec145eef741401151f The package cursorparserfruit was found to contain malicious code. Source: ghsa-malware...

Malicious code in hubstyletokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a762e8fe2aca75314b8b673b01068f64424cb56d5442954e0c44119475dff The package hubstyletokens was found to contain malicious code. Source: ghsa-malware b315d930157f2b1fd1b14cddfbd3f09759c6b275da5b51570eadff87cadf27b8...

Malicious code in hubspotter-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3dd0044e3928c365bb24623980b0d9a2331f30c0edb77e6f17bbea33c13fd8 The package hubspotter-http was found to contain malicious code. Source: ghsa-malware 43d9ec3911f29cfb17361dd4449655beb84d375f84a235afa46eefc10d5980f...

MAL-2025-192631 Malicious code in graphlink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ef168378626d982b73a91720b332c9fd7db13b52cae3f13fdac98f0a210bf7 The package graphlink was found to contain malicious code. Source: ghsa-malware cc99f6fd9ddd36bd01584ba662b4d71a3fab4fadfca2dbcdeb94f40834da0504 Any...

MAL-2025-192640 Malicious code in tailwind-animationbased (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7eef2c8a93c095a7c203eb12ac4dab149ff712b00eef96d4a8febb468710f0 The package tailwind-animationbased was found to contain malicious code. Source: ghsa-malware...