The tailwindcss-animate-bridge npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removing the package alone may not eliminate all malicious software, as the attacker may have gained full control of the system.
The npm package @utilitycraft/tailwindcss-motion-atelier contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The XCPE botnet was a large-scale malware operation involving over 1.3 million set-top boxes infected with a backdoor developed and operated by Videostrong Technology Co., an Android device manufacturer. The backdoor enabled criminal affiliates to conduct ad-fraud, create residential proxy networks, and install additional malware. The botnet infrastructure spanned multiple years and device models. Google and industry partners dismantled the botnet, banned Videostrong from Android certification, and improved firmware integrity reviews for Android TV devices to prevent recurrence.
The atlassian-wallboard-plugin1 npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The Slaiclind campaign uses blockchain smart contracts as covert communication channels to deliver malicious payloads. Attackers embed scripts in compromised websites that query a Polygon blockchain smart contract to retrieve URLs hosting malicious JavaScript. This technique, called EtherHiding, replaces traditional command-and-control infrastructure with blockchain storage, making detection and takedown more difficult. The campaign also employs a kill-switch mechanism controlled via the smart contract. The malicious JavaScript then uses the ClickFix technique to trick users into executing commands, advancing the infection.
The persona-ai-sdk package version 1.0.0 on npm contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised machine. Removing the package does not guarantee full remediation, as the attacker may have established persistent control over the system.
CyberStrikeAI is an open-source AI-driven attack framework used in real-world campaigns targeting educational institutions in Africa and Latin America. It combines large language model (LLM) orchestration with a traditional command-and-control (C2) server, where an AI model generates commands executed by implants on compromised hosts. Initial access was gained via compromised SQL Server infrastructure. The framework automates post-exploitation activities such as reconnaissance, privilege escalation, credential dumping, lateral movement, and data exfiltration using standard techniques like Kerberoasting, AS-REP Roasting, LSASS dumps, DCSync, and Golden Ticket attacks. The AI orchestration reduces the skill barrier for attackers by automating tasks that normally require manual intervention. Despite the AI component, the malicious actions on victim systems use well-known techniques detectable by conventional security controls.
The RubyGems package 'intercom-react-native-example-e2e-tests' version 1.0.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain associated with malicious activity. No further technical details or exploit information are provided.
The RubyGems package 'shoaib-unity' version 1.0.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain associated with malicious activity. No CVSS score or detailed technical exploit information is provided.
The npm package 'contracts-upgradeable' is a malicious package impersonating '@openzeppelin/contracts-upgradeable'. It contains no functional code but executes a preinstall script that sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information. The package was published on 2026-11-02 by the npm account 'bigdevin55', which also published another package with the same malicious behavior. Another account 'cutekitten05' used the same webhook in packages published the day before.
The npm package '@an1mshnpmb9c84920/pipeprobe-obf-m19n5' version 1.0.0 contains malicious code that executes during its 'prepare' lifecycle script. This script runs 'node index.js', which dynamically reconstructs a hostname and performs a DNS lookup to an external domain controlled by the attacker. This behavior confirms code execution on the installer's machine and is concealed by assembling the hostname from string fragments at runtime, evading static detection. The package offers no legitimate functionality related to this DNS callback, indicating malicious intent.
The npm package @axo_cuy/baileys version 1.0.0 declares a hard dependency on an off-registry GitHub repository (github:tenka-san/libsignal-node) without version pinning or integrity checks. This allows the third-party repository owner to change the code at any time, potentially introducing malicious code during installation. The dependency bypasses npm registry review and dependency pinning, increasing the risk of supply chain compromise.
The @bil-rgb/baileys npm package versions 1.0.0 and 1.0.1 declare a dependency on a libsignal library hosted in a personal GitHub repository without specifying a commit SHA, tag, or integrity check. This allows the dependency to resolve to the latest code at the repository's HEAD during installation, enabling arbitrary code execution controlled by the repository owner at install time. The package itself is a fork of Baileys, but the critical risk arises from the uncontrolled external dependency resolution.
The npm package 'dsh-screenshot-native' version 1.0.0 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised device. Removal of the package alone does not guarantee elimination of all malicious software introduced by the package.
The npm package wallet-adapter-base (version 1.0.0) is a malicious package that contains no functional code but executes a preinstall script during installation. This script sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information. The package was published by the npm user cutekitten05, who has published other packages with similar malicious scripts.
The npm package bigbob22-test@1.0.0 contains malicious code in its preinstall script that collects and sends the machine's hostname, OS username, and local time to a Discord webhook. The package itself has no functional code and an empty README. The same malicious script was used by the npm account cutekitten05 in multiple other packages published on the same date.
The 'atlassian-wallboard-plugin' npm package version 10.0.0 has been identified as malicious by the OpenSSF Package Analysis project. It is flagged because it communicates with a domain linked to malicious activity and executes commands associated with malicious behavior. There is no CVSS score or detailed impact description available.
The RubyGems package 'macs-shoaibs-pro17' version 90002.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious due to its communication with a domain linked to malicious activity. No CVSS score or detailed technical impact information is provided.
The npm package @axon-web/icons version 99.0.0 is a malicious package that performs unauthorized data exfiltration upon loading. It constructs an identifier from the host's OS hostname and environment username, then leaks this information via DNS requests to an attacker-controlled domain. Additionally, it scans environment variables for names containing sensitive keywords related to credentials and outputs these key names, indicating reconnaissance activity. The package contains no legitimate icon content and appears to be a dependency confusion or typosquatting attack.
The hs-framework npm package declares a dependency on a tarball hosted at an external HTTPS URL rather than a versioned registry package. This tarball can be changed at any time by whoever controls the storage bucket, allowing arbitrary code execution during npm install via lifecycle scripts. The package itself is a minimal stub, with the dependency URL being the main attack surface. This setup enables supply chain compromise through dynamic, unpinned, and unverified code fetched during installation.