EUVD-2025-66360

Malicious code in suspiciousdragonflyz3n npm...

Malicious code in suspicious_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213106836be1ce85c4c4520d6f9d2ab51d5924246210972b504064e855e62ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51644

Malicious code in suspicious-beige-albatross npm...

EUVD-2025-51645

Malicious code in suspicious-amethyst-eagle npm...

EUVD-2025-51642

Malicious code in suspicious-lime-camel npm...

EUVD-2025-51640

Malicious code in suspicious-turquoise-puffin npm...

EUVD-2025-51643

Malicious code in suspicious-beige-crawdad npm...

EUVD-2025-51641

Malicious code in suspicious-scarlet-bonobo npm...

Malicious code in dowload_ebok_spia_nella_rete_by_riccardo_meggiato_h35d1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22257eee2fe8fd45715137c60e323af36d2ec73059759faee8b9881bc8bffff The package dowloadebokspianellaretebyriccardomeggiatoh35d1 was found to contain malicious code...

MAL-2025-48681 Malicious code in feature-reporter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005ae57fd871f8d3448911152254fcedcae9af32d34e04f01bb020307c5df831 Any computer that has this package installed or running should be considered...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0...

MAL-2025-48750 Malicious code in paysafe-client-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca3abf57e822e819e2d6ce06757f3a061020e9f84cde317ba1382e03d945884 Any computer that has this package installed or running should be considered...

MAL-2025-48690 Malicious code in hyatt-avatar (npm)

Package collects system info and sends to untrusted server, plus suspicious install scripts indicate malicious behavior. The package communicates with a domain associated with malicious activity...

Canada Fines Cybercrime Friendly Cryptomus $176M

Financial regulators in Canada this week levied $176 million in fines against Cryptomus , a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti money-laundering laws come ten months...

What to do when you click on a suspicious link

October is Cybersecurity Awareness Month, and as the tech-savvy friend or family member, people probably come to you for advice. One of the most common questions is: "I clicked a suspicious link. What do I do now?" Don't worry -- panic won't help, but a calm, step-by-step response will. Share thi...

Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day

Threat intelligence firm GreyNoise disclosed on Friday that it has observed a massive spike in scanning activity targeting Palo Alto Networks login portals. The company said it observed a nearly 500% increase in IP addresses scanning Palo Alto Networks login portals on October 3, 2025, the highes...

EUVD-2023-26573

Malicious code in bioql PyPI...

EUVD-2023-55486

Malicious code in bioql PyPI...

EUVD-2025-25122

Malicious code in bioql PyPI...

Amcache Evilhunter Tool

AmCache-EvilHunter is a command-line tool to parse and analyze Windows Amcache.hve registry hives, identify evidence of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups for enhanced threat intelligence...