EUVD-2025-140242

Malicious code in miba-minas-midnas npm...

Malicious code in miba-minas-minas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892862a7f860b8926ac40aed28bdab4ca6c1090bdc2fc6a3dd16a87eb834e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140240

Malicious code in miba-minas-mins npm...

EUVD-2025-140241

Malicious code in miba-minas-minas npm...

EUVD-2025-140237

Malicious code in miba-minas-naudsrt npm...

EUVD-2025-140239

Malicious code in miba-minas-msidnas npm...

Malicious code in miba-minas-midnas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b1ad6bdbcdca5aa741a078ba047394ed4e96a0f5524a26c5fe539db7933643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140238

Malicious code in miba-minas-nadudsrt npm...

MAL-2025-176022 Malicious code in miba-minas-minas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892862a7f860b8926ac40aed28bdab4ca6c1090bdc2fc6a3dd16a87eb834e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach

Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being "USDoD ," a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI 's InfraGard program and leaking contact information for 80,000 members. More recently, USDoD was behind a breach at the...

Unveiling the Minas Miner’s Deceptive Tactics

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Minas is a multi-stage cryptocurrency miner with a concealed presence. It evades detection through encryption, randomization, and persistence techniques, showcasing determined network compromise. To...

Minas – on the way to complexity

Sometimes when investigating an infection and focusing on a targeted attack, we come across something we were not expecting. The case described below is one such occurrence. In June 2022, we found a suspicious shellcode running in the memory of a system process. We decided to dig deeper and...

saaecarmodeminas.mg.gov.br Cross Site Scripting vulnerability OBB-2485500

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mail.saaecarmodeminas.mg.gov.br Cross Site Scripting vulnerability OBB-2485499

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...