EUVD-2025-49436

Malicious code in saltyratz3n npm...

EUVD-2025-49508

Malicious code in relatedratz3n npm...

Malicious code in yearling_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135520a8d0efc3d15e09fc39ed0d8bbe8341d5ba03c0ede709f4fe61800972a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48241

Malicious code in creepyratz3n npm...

MAL-2025-59682 Malicious code in yearling_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135520a8d0efc3d15e09fc39ed0d8bbe8341d5ba03c0ede709f4fe61800972a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising

The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same time, defenders face growing blind spots — from spoofed messages to large-scale social engineering. This week’s findings show how that...

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

The threat actors behind a malware family known as Winos 4.0 aka ValleyRAT have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan RAT tracked as HoldingHands RAT aka Gh0stBins. "The campaign relied on phishing emails with PDFs...

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

The threat actors behind a malware family known as Winos 4.0 aka ValleyRAT have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan RAT tracked as HoldingHands RAT aka Gh0stBins. "The campaign relied on phishing emails with PDFs...

Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave

Threat actors with suspected ties to China have turned a legitimate open-source monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use...

EUVD-2015-8920

Malware in sbrugna...

EUVD-2008-5141

Malware in sbrugna...

EUVD-2008-5142

Malware in sbrugna...

EUVD-2009-3156

Malware in sbrugna...

EUVD-2012-4791

Malware in sbrugna...

EUVD-2008-6962

Malware in sbrugna...

EUVD-2025-30384

Malicious code in bioql PyPI...

EUVD-2022-52966

Malicious code in bioql PyPI...

EUVD-2023-39081

Malicious code in bioql PyPI...

EUVD-2022-53401

Malicious code in bioql PyPI...

Hackers Use Fake Invoices to Spread XWorm RAT via Office Files

Hackers are sending fake invoice emails with malicious Office files that install the XWorm RAT on Windows systems, allowing full remote access and data theft. Learn how the shellcode and process injection are used to steal data, and how to stay safe from this persistent threat...