Malicious code in @posthog/rrweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ff62f7afccd552b5eff3833fa122ace1a2f8ef6447e4b372673896063098f The package @posthog/rrweb was found to contain malicious code. Source: ghsa-malware 8278c73c0fa29817d8923864303d2e24c5a7bd038a9f8a2cae587329a3837cab...

MAL-2025-190703 Malicious code in zapier-platform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91585e373be96645e987946f96de5673a2cae4dec8eabdba368acad43399eb55 The package zapier-platform-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190701 Malicious code in redux-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662afde2ebe0d7c2a8537b2bdab8226b61daf75ff4e54ad51bf5bb7eee8eb The package redux-forge was found to contain malicious code. Source: ghsa-malware f80cb61ec8f9b4f1ee385b40c40e1816cb61a012074ddc792d16f433c6a32294 An...

Malicious code in redux-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662afde2ebe0d7c2a8537b2bdab8226b61daf75ff4e54ad51bf5bb7eee8eb The package redux-forge was found to contain malicious code. Source: ghsa-malware f80cb61ec8f9b4f1ee385b40c40e1816cb61a012074ddc792d16f433c6a32294 An...

MAL-2025-190662 Malicious code in @asyncapi/nunjucks-filters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51137a75fbced2a0515e71df0b97baf386e784c2eb5134c77ed77afdcb48fe34 The package @asyncapi/nunjucks-filters was found to contain malicious code. Source: ghsa-malware...

Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190666 Malicious code in @ensdomains/content-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeb9f2a2d9a8ee1c57695456c8af6657d069eaee694ef7f8c128bb292bfabd The package @ensdomains/content-hash was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190704 Malicious code in zapier-platform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feaebf66449e3086f74f77ceae356f74e4eefe23a3624f5fe1d4c7c1838ea25e The package zapier-platform-core was found to contain malicious code. Source: ghsa-malware...

Malicious code in zapier-platform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feaebf66449e3086f74f77ceae356f74e4eefe23a3624f5fe1d4c7c1838ea25e The package zapier-platform-core was found to contain malicious code. Source: ghsa-malware...

To buy or not to buy: How cybercriminals capitalize on Black Friday

The global e‑commerce market is accelerating faster than ever before, driven by expanding online retail, and rising consumer adoption worldwide. According to McKinsey Global Institute, global e‑commerce is projected to grow by 7–9% annually through 2040. At Kaspersky, we track how this surge in...

Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...

Malicious code in @asyncapi/multi-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fca41600409d9446c4771677d000e0c23cb7f5a5d876cff66c762472d477bae The package @asyncapi/multi-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/modelina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6021816ea47fd6743ed24c196df8db60f0649e0d5b185ceb9b418ba457b21e3 The package @asyncapi/modelina was found to contain malicious code. Source: ghsa-malware...

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

A recently patched security flaw in Microsoft Windows Server Update Services WSUS has been exploited by threat actors to distribute a malware known as ShadowPad. "The attacker targeted Windows Servers with WSUS enabled, exploiting CVE-2025-59287 for initial access," AhnLab Security Intelligence...

MAL-2025-190630 Malicious code in parse-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6800038c1b56247a0767faecf501d0c74de134197bb0edbae2d27b8a958547 The package parse-session was found to contain malicious code. Source: ghsa-malware 5b04d6ff25ce91de5057fed89547b08687055f2ca7a217a2886eecb79c06f9e9...

Malicious code in tailwind-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9713ae723aefcab52d65da5c1473fffe7835c37849c133d7cecffa7ba7284e66 The package tailwind-inquirer was found to contain malicious code. Source: ghsa-malware...

Malicious code in lion-second-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0070c2e566c699a1be9bf159d90a6b42fad16d6c4f74b7315c262ed5e5897f09 The package lion-second-package was found to contain malicious code. Source: ghsa-malware...

Accuracy and Efficiency Trade-Offs in LLM-Based Malware Detection and Explanation: A Comparative Study of Parameter Tuning Vs. Full Fine-Tuning

This study examines whether Low-Rank Adaptation LoRA fine-tuned Large Language Models LLMs can approximate the performance of fully fine-tuned models in generating human-interpretable decisions and explanations for malware classification. Achieving trustworthy malware detection, particularly when...

Synthetic Data: AI'S New Weapon against Android Malware

The ever-increasing number of Android devices and the accelerated evolution of malware, reaching over 35 million samples by 2024, highlight the critical importance of effective detection methods. Attackers are now using Artificial Intelligence to create sophisticated malware variations that can...

Malicious code in minizip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 33ba100525dffc7a828e4b7384f862ff22dfb55d2e7d61a34c0d31ecdff64c10 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...