MAL-2025-80913 Malicious code in ratty_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882c25a6d69525553b3f3c2d445281ccafae2f69069237cf7fd2e126226806fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty-purple-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2362022b650423490fd14a41779e134aafd531d101dba8caa5d99edbce6ec94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52445

Malicious code in ratty-purple-whippet npm...

EUVD-2025-52446

Malicious code in ratty-coral-pony npm...

MAL-2025-70203 Malicious code in ratty-coral-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d31823f5c16f933354a3954d875a560f2f383d43fa79fb56ff8a50cf2530696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45629

Malicious code in rattyrabbitz3n npm...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...

This New Stealthy JavaScript Loader Infecting Computers with Malware

Threat actors have been found using a previously undocumented JavaScript malware strain that functions as a loader to distribute an array of remote access Trojans RATs and information stealers. HP Threat Research dubbed the new, evasive loader "RATDispenser," with the malware responsible for...