15601 matches found
A week in security (November 3 – November 9)
Last week on Malwarebytes Labs: Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025 Fake CAPTCHA sites now have tutorial videos to help victims install malware Hackers commit highway robbery, stealing cargo and goods Android malware steals your card details and PIN to make instant A...
Malicious code in @anhackle/test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3377870b5585dd1a882aa7181cd653b554663bbaed7cfb956630d6a61e6e881 The package @anhackle/test was found to contain malicious code...
MAL-2025-49394 Malicious code in @anhackle/test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3377870b5585dd1a882aa7181cd653b554663bbaed7cfb956630d6a61e6e881 The package @anhackle/test was found to contain malicious code...
EUVD-2025-38436
Malicious code in @anhackle/test npm...
Malicious code in study-lab-npm-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc0a35e84f7b481414283261b7ca20709c25f15da68f387188a9eb0def1b523 The package study-lab-npm-test was found to contain malicious code...
EUVD-2025-38433
Malicious code in autonomous-header-package-test npm...
MAL-2025-49397 Malicious code in autonomous-header-package-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775be40249679a17a21b7c5edcc88200f32c6761919c883216dfa363965511aa The package autonomous-header-package-test was found to contain malicious code...
Enhancing Deep Learning-Based Rotational-XOR Attacks on Lightweight Block Ciphers Simon32/64 and Simeck32/64
At CRYPTO 2019, Gohr pioneered neural cryptanalysis by introducing differential-based neural distinguishers to attack Speck32/64, establishing a novel paradigm combining deep learning with differential cryptanalysis.Since then, constructing neural distinguishers has become a significant approach ...
CVE-2025-63713
Cross-Site Scripting XSS vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test...
EUVD-2025-38259
Cross-Site Scripting XSS vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test...
CVE-2025-63713
Cross-Site Scripting XSS vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test...
CVE-2025-63713
Cross-Site Scripting XSS vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test...
Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025
The AV-Comparatives Stalkerware Test 2025 delivers a sobering look at the evolving threat posed by stalkerware on mobile devices. Despite measures from both the tech industry and platform providers, stalkerware-type apps, which are apps that can be installed covertly to spy on a victim’s private...
Security Bulletin: IBM Engineering Test Management bundles IBM WebSphere Application Server which could provide weaker than expected security.
Summary IBM WebSphere Application Server shipped with IBM Engineering Test Management could provide weaker than expected security for TLS connections CVE-2025-33142. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affect...
Malicious code in rce-poc-test-honor-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09 The package rce-poc-test-honor-mcp was found to contain malicious code. Source: ghsa-malware...
Malicious code in rce-poc-test-honor-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66eed52fc0c24b51f24da6c244c23fc29ce6228dd4a97a0606f71bb254f02b7 The package rce-poc-test-honor-dev was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview rce-poc-test-honor-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
MAL-2025-49383 Malicious code in rce-poc-test-honor-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09 The package rce-poc-test-honor-mcp was found to contain malicious code. Source: ghsa-malware...
MAL-2025-49382 Malicious code in rce-poc-test-honor-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66eed52fc0c24b51f24da6c244c23fc29ce6228dd4a97a0606f71bb254f02b7 The package rce-poc-test-honor-dev was found to contain malicious code. Source: ghsa-malware...