MAL-2025-47861 Malicious code in purple-npm (npm)

The package purple-npm was found to contain malicious code...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from an unchecked command index, which could lead to local elevation of privilege...

Malicious code in electron-purple-player (npm)

The package electron-purple-player was found to contain malicious code...

MAL-2025-19455 Malicious code in electron-purple-player (npm)

The package electron-purple-player was found to contain malicious code...

Malicious code in near-purple-buzzard (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9724 Malicious code in near-purple-buzzard (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in experimental-purple-walrus (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9609 Malicious code in experimental-purple-walrus (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9600 Malicious code in ethnic-purple-iguana (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ethnic-purple-iguana (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acceptable-purple-sheep (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9493 Malicious code in acceptable-purple-sheep (npm)

--- -= Per source details. Do not edit below this line.=-...

Brandon Adkins’ Career Journey - Taking Chances and Tackling New Challenges

Brandon Adkins is the Manager of our Threat Intelligence & Detection Engineering TIDE team. His career journey spans a variety of roles and teams where he has been able to showcase his technical skills in security. Since joining Rapid7, he’s had experience as a Penetration Testing Consultant,...

purple-directory.com GDPR PII Exposure vulnerability OBB-3861196

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DirtyMoe Malware Infects 2,000+ Ukrainian Computers for DDoS and Cryptojacking

The Computer Emergency Response Team of Ukraine CERT-UA has warned that more than 2,000 computers in the country have been infected by a strain of malware called DirtyMoe. The agency attributed the campaign to a threat actor it calls UAC-0027. DirtyMoe, active since at least 2016, is capable of...

purplelindacrafts.co.uk Cross Site Scripting vulnerability OBB-3834245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

purpledimension.com Improper Access Control vulnerability OBB-3808686

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the phasecheckserver. An attacker could exploit the vulnerability to escalate privileges...

PurpleOps - An Open-Source Self-Hosted Purple Team Management Web Application

An open-source self-hosted purple team management web application. Key Features Template engagements and testcases Framework friendly Role-based Access Control & MFA Inbuilt DOCX reporting + custom template support How PurpleOps is different: No attribution needed Hackable, no "no-reversing"...

Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners. The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year...