MAL-2025-17001 Malicious code in chromedriver-lint-staged-acamar-luminescence (npm)

The package chromedriver-lint-staged-acamar-luminescence was found to contain malicious code...

MAL-2025-27339 Malicious code in neutronstar-plutology-grus-lint-staged (npm)

The package neutronstar-plutology-grus-lint-staged was found to contain malicious code...

Malicious code in singularitarianism-eleventy-gridsome-lint-staged (npm)

The package singularitarianism-eleventy-gridsome-lint-staged was found to contain malicious code...

Malicious code in lint-staged-install-bellatrix-geodynamo (npm)

The package lint-staged-install-bellatrix-geodynamo was found to contain malicious code...

Malicious code in photon-lint-staged-scorpius-oortcloud (npm)

The package photon-lint-staged-scorpius-oortcloud was found to contain malicious code...

Malicious code in neutronstar-plutology-grus-lint-staged (npm)

The package neutronstar-plutology-grus-lint-staged was found to contain malicious code...

MAL-2025-29172 Malicious code in photon-lint-staged-scorpius-oortcloud (npm)

The package photon-lint-staged-scorpius-oortcloud was found to contain malicious code...

MAL-2025-31935 Malicious code in redis-gacrux-astrochemistry-lint-staged (npm)

The package redis-gacrux-astrochemistry-lint-staged was found to contain malicious code...

Malicious code in heka-native-frontend-lint-staged (npm)

The package heka-native-frontend-lint-staged was found to contain malicious code...

Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)

The package lint-staged-ceres-metalsmith-non-blocking was found to contain malicious code...

MAL-2025-25410 Malicious code in lint-staged-install-bellatrix-geodynamo (npm)

The package lint-staged-install-bellatrix-geodynamo was found to contain malicious code...

MAL-2025-33291 Malicious code in singularitarianism-eleventy-gridsome-lint-staged (npm)

The package singularitarianism-eleventy-gridsome-lint-staged was found to contain malicious code...

MAL-2025-31936 Malicious code in redis-mantle-andromeda-lint-staged (npm)

The package redis-mantle-andromeda-lint-staged was found to contain malicious code...

ProvX: Generating Counterfactual-Driven Attack Explanations for Provenance-Based Detection

Provenance graph-based intrusion detection systems are deployed on hosts to defend against increasingly severe Advanced Persistent Threat. Using Graph Neural Networks to detect these threats has become a research focus and has demonstrated exceptional performance. However, the widespread adoption...

MAL-2025-6630 Malicious code in lint-staged-custom (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lint-staged-custom (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vue-cli-plugin-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4c725718310cb969ec6171fad585bea2b58fc7d4460be6b706cb8529356d7a The OpenSSF Package Analysis project identified 'vue-cli-plugin-lint-staged' @ 9.9.7 npm as malicious. It is considered malicious because: - The...

MAL-2024-11893 Malicious code in vue-cli-plugin-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4c725718310cb969ec6171fad585bea2b58fc7d4460be6b706cb8529356d7a The OpenSSF Package Analysis project identified 'vue-cli-plugin-lint-staged' @ 9.9.7 npm as malicious. It is considered malicious because: - The...

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Many thanks to Rapid7 MDR and incident response teams for their contributions to this analysis. While investigating incidents related to Cleo software exploitation, Rapid7 Labs and MDR observed a novel, multi-stage attack that deploys an encoded Java Archive JAR payload. Our investigation reveale...

Malicious code in odyssey-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...