217 matches found
MAL-2026-7012 Malicious code in express-mongo-limit (npm)
The npm package express-mongo-limit masquerades as an Express/MongoDB payload sanitization middleware likely typosquatting express-mongo-sanitize but is a credential stealer, remote-code-execution backdoor, crypto clipboard hijacker, and screenshot spyware. It declares a postinstall: node index.j...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
EUVD-2025-175471
Malicious code in xo-helios-child-process-pm2 npm...
EUVD-2025-180227
Malicious code in auth-pm2-xo-google npm...
Malicious code in xo-helios-child-process-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6abf116ef5bd6a77aedf9bcc2b5428a4945e26fbf2e8c0d79a0fccebb457771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178143
Malicious code in leda-pm2-lacerta-speleology npm...
EUVD-2025-178841
Malicious code in foundation-rigel-pm2-foundation npm...
EUVD-2025-176076
Malicious code in tachyon-mesosphere-spinner-pm2 npm...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...
EUVD-2025-179626
Malicious code in commitlint-resolvers-procyon-pm2 npm...
EUVD-2025-179839
Malicious code in celeste-pm2-xerxes-kuiperbelt npm...
EUVD-2025-179031
Malicious code in eslint-postcss-loader-pm2-cressida npm...
EUVD-2025-179179
Malicious code in electron-pm2-toml-test npm...
Malicious code in leda-pm2-lacerta-speleology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15f24a3383d0a2cf2d4910535b0e870d23aaadc1c90c54fe9c449020340802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180184
Malicious code in await-pm2-quito-meteor npm...
MAL-2025-186256 Malicious code in commitlint-resolvers-procyon-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a42a0bd7b27857197441ce982e9035d4e93ebf009d7bb23942627d9ce0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zephyr-mongodb-wavefunction-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6455e842bfed2e45795b6fa4955bfa999151b2b9d2cf8678f31179f7a042f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177963
Malicious code in mantle-galaxy-vuetify-pm2 npm...