237 matches found
org.apache.mina:mina-example (2.0.0-m1), org.apache.mina:mina-integration-jmx (2.0.0-m1) +13 more potentially affected by CVE-2026-113730 via ognl:ognl (2.7.1)
ognl:ognl MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ognl:ognl and may be impacted: - org.apache.mina:mina-example 2.0.0-m1 - org.apache.mina:mina-integration-jmx 2.0.0-m1 - org.apache.mina:mina-integration-ognl 2.0.0-m1 -...
Malicious code in linguistic-beige-mule (npm)
--- Credit: OpenSSF source...
Malicious Package
Overview leading-ivory-mule is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in leading-ivory-mule (npm)
Source: amazon-inspector a6359b27a77f0f5dc72400780849de8ac12fd5dc192594677d30526f50469153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in homely-gray-mule (npm)
Source: amazon-inspector a374cfb4de040a05b2c73c883bf22812d0c7a2258fcde2b112b1231ee7ecbcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in educational-magenta-mule (npm)
Source: amazon-inspector 8891428c7c06c11043e2c71d24ce27f1eda9403e7284ae557c17009e506ed758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in early-orange-mule (npm)
Source: amazon-inspector 786a66000246e9f58983e11ce65f3321990748f793638c79a64eeb2e88d71bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in depressed-lavender-mule (npm)
Source: amazon-inspector 8bd69e490ab0caba8638f725426efdf3a6177a6ea9fbf8bb920e73da61aaeca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in damp-crimson-mule (npm)
Source: amazon-inspector eda62674966aea8a64918dc232dd16d6b55b293ba1d9449b3463496237e44cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in coherent-plum-mule (npm)
Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview damp-crimson-mule is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @zalastax/nolb-mule (npm)
The package @zalastax/nolb-mule was found to contain malicious code. --- Credit: OpenSSF source...
Linux Distros Unpatched Vulnerability : CVE-2026-51105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OPSERVERMESSAGE Handler. CVE-2026-511...
A week in security (July 6 – July 12)
Last week on Malwarebytes Labs: This new Windows malware can take over your PC and wipe it clean How mule betting scams recruit ordinary people Two Chrome updates in two days fix critical vulnerabilities How World Cup crypto prediction sites take your money 6.9 million driver’s license numbers...
How mule betting scams recruit ordinary people
Mule betting or third-party betting account scams are a form of money mule scam where criminals recruit or coerce people into opening gambling accounts in their own name. The criminals then use those accounts to place bets to help launder money and obscure the source or ownership of funds. The UK...
Beware of “Parcel Expert” job offers: They’re parcel mule scams
A parcel mule scam, also called a reshipping scam, is a fake job offer designed to recruit people into handling stolen goods. It usually starts with a fake remote job offer that promises easy money for receiving, inspecting, repackaging, and forwarding packages from home. The “employer” may claim...
com.gitlab.java-ebms-adapter:ebms-adapter-web (2.15.2-mic), com.gitlab.java-ebms-adapter:ebms-core (2.15.2-mic) +12 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.1.release)
org.springframework:spring-jms MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.gitlab.java-ebms-adapter:ebms-adapter-web 2.15.2-mic -...
com.sitewhere:sitewhere-activemq (>=1.0.2, <=1.4.0), com.sitewhere:sitewhere-azure (>=1.0.2, <=1.4.0) +27 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.10.release)
org.springframework:spring-jms MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.sitewhere:sitewhere-activemq =1.0.2, =1.0.2, =1.2.0, =1.0.2, =1.2.0, =1.0.2, =1.0.2,...
The democratisation of business email compromise fraud
Welcome to this week's edition of the Threat Source newsletter. Last weekend, I witnessed a crime. Not a notable crime that you might read about in the press, but an unremarkable fraud attempt that nevertheless illustrates how new threat actor capabilities are emerging. I imagine that most people...