MSC-2026-12405

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12406

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12412

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12410

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12409

This package impersonates the popular React library. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private keys, np...

MSC-2026-12411

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12408

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12413

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...

MSC-2026-12407

This package impersonates the popular Express web framework. It contains code that downloads and runs a Linux backdoor based on the CHAOS remote access tool, disguised as a system font service systemd-fontd, which connects to a command-and-control server over Tor. The backdoor steals SSH private...