Malicious code in @art-ws/prettier (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ad654106f2b917f883774d7484c2a6e0b8321808a7693b56ce60c52eaf85e3 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @teselagen/bounce-loader (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2f86497a8f8ebd289f9296f0d154c87fd2429bdf4fc8de97c6b1684ed3b9aaa Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47344 Malicious code in react-jsonschema-rxnt-extras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e29ae9593362f6ccecd21ee9abaabfe0baf7da78be18ebeeef87277d03b1f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47213 Malicious code in ts-gaussian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28976f40d9c1e8c05d8a074ce4984cedef949d2d116e5131b5db71e55cd43695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview acloud-client is a malicious package. This package contains malicious code disguised as a legitimate cloud client utility, and its content has been removed from the official package manager. Its primary purpose is to steal cloud-related secrets, such as API keys and access tokens. The...

Malicious Package

Overview tclients-sdk is a malicious package. This package contains malicious code disguised as a legitimate cloud client utility, and its content has been removed from the official package manager. Its primary purpose is to steal cloud-related secrets, such as API keys and access tokens. The...

Malicious Package

Overview boardpostingduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools fo...

Malicious Package

Overview tiupd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview duocafecomment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

New Malware “BunnyLoader 3.0” Steals Credentials and Crypto

By Waqas Another day, another cybersecurity threat hits unsuspected users! This is a post from HackRead.com Read the original post: New Malware "BunnyLoader 3.0" Steals Credentials and Crypto...

Malicious Package

Overview kfactionantiafk is a malicious package. It distributes Discord malware hosted on GitHub, that can steal important host information and credentials. Remediation Avoid using all malicious instances of the kfactionantiafk package. References - Injected Code Credit: Snyk Research Team...

Malicious Package

Overview kfactionbypasser is a malicious package. It distributes Discord malware hosted on GitHub, that can steal important host information and credentials. Remediation Avoid using all malicious instances of the kfactionbypasser package. References - Injected Code Credit: Snyk Research Team...

Watch out as fake ransomware attack infects PCs with StrRAT

By Habiba Rashid StrRAT malware steals credentials and changes file name extension to .crimson but it does not encrypt any data like in a ransomware attack. This is a post from HackRead.com Read the original post: Watch out as fake ransomware attack infects PCs with StrRAT...

GHSA-XFMW-2VMM-579C Nodesass is malware

The nodesass package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...