503 matches found
EUVD-2020-19052
Malware in sbrugna...
EUVD-2025-31595
Malicious code in bioql PyPI...
MAL-2025-47377 Malicious code in @art-ws/eslint (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83d069d4a2ec97b0c9568ab092221b10e8ee955429fee08d074bb6ef5f985002 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in spin-tank-spread (npm)
The package spin-tank-spread was found to contain malicious code...
MAL-2025-46131 Malicious code in spin-tank-spread (npm)
The package spin-tank-spread was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2021-47067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: soc/tegra: regulators: Fix locking up when voltage-spread is out of range Fix voltage couple...
Analyzing the Mirai IoT Botnet and Its Recent Variants: Satori, Mukashi, Moobot, and Sonic
Mirai is undoubtedly one of the most significant Internet of Things IoT botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed its predecessors. Its developers released the source code, which triggered the development of several...
Years Long Linux Cryptominer Spotted Using Legit Sites to Spread Malware
Cryptominer campaign runs for years using legit sites to spread malware, targeting Linux systems through known bugs and avoiding detection...
MAD-Spear: a Conformity-Driven Prompt Injection Attack on Multi-Agent Debate Systems
Multi-agent debate MAD systems leverage collaborative interactions among large language models LLMs agents to improve reasoning capabilities. While recent studies have focused on increasing the accuracy and scalability of MAD systems, their security vulnerabilities have received limited attention...
Google AI taken for a ride by April Fools’ Day joke
Cwmbran in Wales, a town with a population of just under 50,000, holds the Guinness World Record for the most roundabouts—at least according to Google AI Overviews. Except that's not actually true… Ben Black has been publishing lighthearted fake stories on April Fools’ Day for his community news...
5 Unexpected Devices You Didn’t Know Could Spread Malware
When you think of malware, your mind probably jumps to malicious downloads or email attachments. But it turns…...
Hackers Exploit Cloud Misconfigurations to Spread Malware
Veriti Research reveals 40% of networks allow 'any/any' cloud access, exposing critical vulnerabilities. Learn how malware like XWorm…...
MAL-2025-1380 Malicious code in tenable-universal-layout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Hackers Hide Malware in Fake DeepSeek PyPI Packages
Malicious DeepSeek packages on PyPI spread malware, stealing sensitive data like API keys. Learn how this attack targeted developers and how to protect yourself...
Spotify, Audible, and Amazon used to push dodgy forex trading sites and more
Spotify and Amazon services have been flooded with bogus listings that push dubious "forex trading" sites, Telegram channels, and suspicious links claiming to offer pirated software according to our friends over at BleepingComputer. Cybercriminals are abusing the options to inject keywords and...
Malicious code in plugin-transform-object-rest-spread (npm)
--- -= Per source details. Do not edit below this line.=-...
GO-2022-0560 Nomad Spread Job Stanza May Trigger Panic in Servers in github.com/hashicorp/nomad
Nomad Spread Job Stanza May Trigger Panic in Servers in github.com/hashicorp/nomad...
'Stargazer Goblin' Creates 3,000 Fake GitHub Accounts for Malware Spread
A threat actor known as Stargazer Goblin has set up a network of inauthentic GitHub accounts to fuel a Distribution-as-a-Service DaaS that propagates a variety of information-stealing malware and netting them $100,000 in illicit profits over the past year. The network, which comprises over 3,000...
Using the LockBit builder to generate targeted ransomware
The previous Kaspersky research focused on a detailed analysis of the LockBit 3.0 builder leaked in 2022. Since then, attackers have been able to generate customized versions of the threat according to their needs. This opens up numerous possibilities for malicious actors to make their attacks mo...
