Malicious Package

Overview vds-monarch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in vds-monarch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc03a6a0feff43eef44ac91f0e9ce68c422a439528842f139bf1164366c66d The package vds-monarch was found to contain malicious code. Source: ghsa-malware 23d64f4764ccc88b26aa567b6d6828093fe8d35500ac67a19ced44828073dbf4 An...

MAL-2026-929 Malicious code in vds-monarch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc03a6a0feff43eef44ac91f0e9ce68c422a439528842f139bf1164366c66d The package vds-monarch was found to contain malicious code. Source: ghsa-malware 23d64f4764ccc88b26aa567b6d6828093fe8d35500ac67a19ced44828073dbf4 An...

Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations

Over the past year, Microsoft Threat Intelligence observed the proliferation of RedVDS, a virtual dedicated server VDS provider used by multiple financially motivated threat actors to commit business email compromise BEC, mass phishing, account takeover, and financial fraud. Microsoft’s...

EUVD-2025-135404

Malicious code in thumbi-vds-yusnista npm...

EUVD-2025-135435

Malicious code in thudmbi-vds-uylmii npm...

MAL-2025-179151 Malicious code in thudmbi-vds-uyli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf1cd4ec395b23a894bf7c0ff43a929ccc4596e633da07eb802f1a2f28b5c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135434

Malicious code in thudmbi-vds-uylmii npm...

EUVD-2025-135438

Malicious code in thudmbi-vds-tyu npm...

EUVD-2025-135436

Malicious code in thudmbi-vds-uyli npm...

EUVD-2025-135437

Malicious code in thudmbi-vds-uyli npm...

EUVD-2025-135433

Malicious code in thudmbi-vds-yusnista npm...

EUVD-2025-135432

Malicious code in thudmbi-vds-yusnista npm...

EUVD-2025-135405

Malicious code in thumbi-vds-yusnista npm...

MAL-2025-179168 Malicious code in thumbi-vds-yusnista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58334fbbd276685917a121617404bbf6c08cc78321e3e85a57aee26b3a4ac201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudmbi-vds-uyli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf1cd4ec395b23a894bf7c0ff43a929ccc4596e633da07eb802f1a2f28b5c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135439

Malicious code in thudmbi-vds-tyu npm...

EUVD-2025-26773

Malicious code in bioql PyPI...

vds-sonne.de Cross Site Scripting vulnerability OBB-3218609

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SAP 3D Visual Enterprise Viewer VDS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...