686 matches found
MAL-2024-9149 Malicious code in get-new-script-roblox-bedwars-script-076bmo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a943cd109acdf8945f8521c6aeda7ebbc895c1fcca206e2d2845e1971f48e93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9150 Malicious code in get-new-script-roblox-fishing-simulator-script-x5c6h7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d3935d85ffff584c274c803e27fe750e88812237d94029109b8e18bab26ab63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9151 Malicious code in get-new-script-roblox-murder-mystery-2-h-a-c-k-script-87l2lf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dceef79eb5edb5022fd0ab761d5786442061cd22af13a908da5d0c3be177f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Trouble in Da Hood: Malicious Actors Use Infected PyPI Packages to Target Roblox Cheaters
The world of gaming can be a cut-throat place, with many players turning to online help via third-party programs ‘game hacks’ to get ahead. Although some of these programs offer legitimate game boosts, malicious actors frequently leverage these game hackers’ interest in modifications to deliver...
September 10, 2024—KB5043080 (OS Build 26100.1742)
None None...
MAL-2024-8856 Malicious code in roblox-tracer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4766dbf57e00dc5b3ef46f29e17392167d207c46ccf1a6ea97fc9bcf674cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in roblox-tracer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4766dbf57e00dc5b3ef46f29e17392167d207c46ccf1a6ea97fc9bcf674cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in roblox-badges (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631332631f47abd7acead3d283e6d06c693fe8e56c3f235bb0855b8fce3fe8a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8852 Malicious code in roblox-badges (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631332631f47abd7acead3d283e6d06c693fe8e56c3f235bb0855b8fce3fe8a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8853 Malicious code in roblox-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in roblox-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8851 Malicious code in core-roblox-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36c128906b41aa659324dd5d01db1bec23003e69002b6649abda7c43677ae835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in core-roblox-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36c128906b41aa659324dd5d01db1bec23003e69002b6649abda7c43677ae835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers' Systems
Roblox developers are the target of a persistent campaign that seeks to compromise systems through bogus npm packages, once again underscoring how threat actors continue to exploit the trust in the open-source ecosystem to deliver malware. "By mimicking the popular 'noblox.js' library, attackers...
Year-Long Malware Campaign Exploits NPM to Attack Roblox Developers
A year-long malware campaign targets Roblox developers using fake NPM packages mimicking "noblox.js" to steal data. Despite takedowns,…...
August 13, 2024—KB5041571 (OS Build 26100.1457)
None None...
MAL-2024-7792 Malicious code in roblox-ts-core (npm)
This package contains a malicious postinstall script which downloads further payloads and delivers QuasarRAT. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e846a11945248574678fe65e4f8cd5b4a766ff129c761b615aef0f0c595fa5 Any computer that has this package installe...
Malicious code in roblox-ts-core (npm)
This package contains a malicious postinstall script which downloads further payloads and delivers QuasarRAT. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e846a11945248574678fe65e4f8cd5b4a766ff129c761b615aef0f0c595fa5 Any computer that has this package installe...