Malicious code in forge-jsx4 (npm)

forge-jsx4 is a remote access trojan RAT published to the public npm registry by the account rafaelsilva [email protected]. Versions 1.0.122 and 1.0.123 were published on June 21-22, 2026 as a reconstitution of the forge-jsx / forge-jsxy campaign, reusing the same command-and-control...

EUVD-2019-0794

Malware in sbrugna...

MAL-2025-46499 Malicious code in venus-winston-docusaurus-aquarius (npm)

The package venus-winston-docusaurus-aquarius was found to contain malicious code...