Malicious Package

Overview vds-monarch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malware in vds-monarch

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in vds-monarch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc03a6a0feff43eef44ac91f0e9ce68c422a439528842f139bf1164366c66d The package vds-monarch was found to contain malicious code. Source: ghsa-malware 23d64f4764ccc88b26aa567b6d6828093fe8d35500ac67a19ced44828073dbf4 An...

MAL-2026-929 Malicious code in vds-monarch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc03a6a0feff43eef44ac91f0e9ce68c422a439528842f139bf1164366c66d The package vds-monarch was found to contain malicious code. Source: ghsa-malware 23d64f4764ccc88b26aa567b6d6828093fe8d35500ac67a19ced44828073dbf4 An...

Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations

Over the past year, Microsoft Threat Intelligence observed the proliferation of RedVDS, a virtual dedicated server VDS provider used by multiple financially motivated threat actors to commit business email compromise BEC, mass phishing, account takeover, and financial fraud. Microsoft’s...

EUVD-2025-135436

Malicious code in thudmbi-vds-uyli npm...

EUVD-2025-135433

Malicious code in thudmbi-vds-yusnista npm...

EUVD-2025-135405

Malicious code in thumbi-vds-yusnista npm...

EUVD-2025-135439

Malicious code in thudmbi-vds-tyu npm...

Malicious code in thudmbi-vds-uyli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf1cd4ec395b23a894bf7c0ff43a929ccc4596e633da07eb802f1a2f28b5c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135437

Malicious code in thudmbi-vds-uyli npm...

EUVD-2025-135438

Malicious code in thudmbi-vds-tyu npm...

EUVD-2025-135434

Malicious code in thudmbi-vds-uylmii npm...

EUVD-2025-135432

Malicious code in thudmbi-vds-yusnista npm...

MAL-2025-179151 Malicious code in thudmbi-vds-uyli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf1cd4ec395b23a894bf7c0ff43a929ccc4596e633da07eb802f1a2f28b5c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135435

Malicious code in thudmbi-vds-uylmii npm...

EUVD-2025-135404

Malicious code in thumbi-vds-yusnista npm...

MAL-2025-179168 Malicious code in thumbi-vds-yusnista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58334fbbd276685917a121617404bbf6c08cc78321e3e85a57aee26b3a4ac201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-26773

Malicious code in bioql PyPI...

vds-sonne.de Cross Site Scripting vulnerability OBB-3218609

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...