MAL-2025-49269 Malicious code in soxhob-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f363c792232ff069ace1465cb749f1af3aaecf8dfac04cfd380891e6e92caec9 The package soxhob-client was found to contain malicious code. Source: ghsa-malware f87ebbd60bec6fb45dfb478c7a9bd94336690f19c4870e5ac5766c9d864a75ff...

MAL-2025-49258 Malicious code in genesis-drop-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edb9a242cd3f939420031dd53e6057ae90e644f3a08fdc50bc1f92d1296832e The package genesis-drop-actions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49259 Malicious code in hemi-tunnel-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9feb879a8f0ac0f1fb2619e70c3754e9f3f5d12d43e0ab6ea159cf029a604b The package hemi-tunnel-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in soxhob-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f363c792232ff069ace1465cb749f1af3aaecf8dfac04cfd380891e6e92caec9 The package soxhob-client was found to contain malicious code. Source: ghsa-malware f87ebbd60bec6fb45dfb478c7a9bd94336690f19c4870e5ac5766c9d864a75ff...

Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

Malicious code in hemi-viem-stake-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d9184337bc393349d525de921a714d1d1b7d49ccac08cc2d35ff378627971a The package hemi-viem-stake-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in hemi-tunnel-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9feb879a8f0ac0f1fb2619e70c3754e9f3f5d12d43e0ab6ea159cf029a604b The package hemi-tunnel-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in cordova-plugin-globalization.moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49253 Malicious code in cordova-plugin-globalization.moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49260 Malicious code in hemi-viem-stake-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d9184337bc393349d525de921a714d1d1b7d49ccac08cc2d35ff378627971a The package hemi-viem-stake-actions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49273 Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

MAL-2025-49263 Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

Malicious code in tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc855ea3b9e7fe55f82bc9c967ae3e8789666f58f0a9504975e905a164c5af2 The package tailwindcss-utility was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49245 Malicious code in tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc855ea3b9e7fe55f82bc9c967ae3e8789666f58f0a9504975e905a164c5af2 The package tailwindcss-utility was found to contain malicious code. Source: ghsa-malware...

Malicious code in muleforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a547ae30a3611da545a607846c864a52e6d4c02c515dc4280b5b74b841c6f8e The package muleforge was found to contain malicious code. Source: ghsa-malware 4337a4cda2c79d821c2425b131f7fbf169472e4b8b4e07a7646ed384cb7a7b2c Any...

MAL-2025-49101 Malicious code in muleforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a547ae30a3611da545a607846c864a52e6d4c02c515dc4280b5b74b841c6f8e The package muleforge was found to contain malicious code. Source: ghsa-malware 4337a4cda2c79d821c2425b131f7fbf169472e4b8b4e07a7646ed384cb7a7b2c Any...

ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising

The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same time, defenders face growing blind spots — from spoofed messages to large-scale social engineering. This week’s findings show how that...

PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

Cybersecurity researchers have uncovered yet another active software supply chain attack campaign targeting the npm registry with over 100 malicious packages that can steal authentication tokens, CI/CD secrets, and GitHub credentials from developers' machines. The campaign has been codenamed...

Malicious code in snavbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5af4f54b61e8c07cb80d8f65c7ff554627597f600fe3b67094eb71097903548 At CLI startup, index.js downloads three native shared libraries sbx.so, bot.so, v1.so from https://$arch.31888.xyz/ amd64.31888.xyz, arm64.31888.xyz...