The ccsseecc-crypto-toolkit npm package contains malicious code that fully compromises any computer on which it is installed or running. It can lead to complete control by an outside entity, risking all secrets and keys stored on the affected system. Immediate removal of the package and rotation of all secrets from a different computer are strongly advised.
The npm package ccsec-form-validator contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee eradication of the malicious software or attacker control.
The ccsec-crypto-toolkit npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone may not fully remediate the infection, as the attacker may have established persistent control over the system.
The csec-form-validator npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The csec-crypto-toolkit npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not eliminate all malicious software introduced by it, as the attacker may have gained full control of the system.
The npm package 'agentenact' version 0.2.0 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control over the system.
SkyW4lker is a phishing kit active since June 2026 that targets Microsoft 365 authentication by exploiting OAuth 2.0 device-code flows to bypass MFA. It uses password-protected email attachments leading victims through CAPTCHA pages to malicious sites requesting device codes. The kit primarily targets US firms, especially in technology, manufacturing, and government sectors, and shares infrastructure with the Gabagool phishing kit.
The dsh-vm-tester npm package versions 0.1.2, 0.1.3, and 0.1.4 contain malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone does not guarantee elimination of all malicious components, as the attacker may have established persistent control.
@webapp-shared/login-vmok is a malicious npm package designed for dependency confusion attacks. It impersonates an internal scoped package and was published with multiple versions containing a postinstall script that sends sensitive host information to a remote server over unencrypted HTTP. The package also sends this data whenever it is loaded, disclosing internal hostnames and filesystem paths to an attacker-controlled endpoint. Placeholder versions without malicious code exist but are not affected.
The numprint package on PyPI version 1.2.0 contains malicious code that executes during installation. It starts a background process that runs commands from an attacker via communication through a GitHub Gist. This behavior indicates the package is used as a remote access trojan (RAT) to execute attacker-provided commands on the victim's machine.
The Gentlemen is a Russian-speaking ransomware-as-a-service (RaaS) group active since mid-2025. It operates a double-extortion model by encrypting files and exfiltrating data to pressure victims into paying ransoms. The group targets Windows, Linux, NAS, and BSD systems and has claimed over 800 victims, primarily in the US and Europe. It aggressively offers affiliates up to 90% of ransom revenue. The group uses EDR-killing tools and deletes forensic artifacts to evade detection. A breach of its infrastructure in May 2026 exposed internal communications and affiliate details, providing insights into its operations and links to other ransomware groups.
The adyen-web-v6 npm package contains malicious code that compromises any computer on which it is installed or running. Systems with this package should be considered fully compromised, necessitating immediate rotation of all secrets and keys from a separate, secure machine. Removal of the package alone may not eliminate all malicious software introduced by it.
The npm package 'buttoncontent' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean machine. Removing the package alone may not fully remove the malicious software or restore system integrity.
Starting around October 20, 2026, unprotected Cairn AI pentesting harnesses have been targeted by automated campaigns from unknown actors. These attackers insert malicious tasks to manipulate AI agents, leading to host system compromise through profiling, credential theft including AI model API keys, Poseidon malware deployment, and unauthorized SSH key installation. Two distinct threat clusters, AIA0009 and AIA0010, conduct synchronized attacks focusing on persistence/malware deployment and exploration/credential extraction respectively. The campaigns use AI-driven automation to attack AI operations, including container escape attempts and reconnaissance. Poseidon RAT is deployed with Bunny.net CDN-based command and control infrastructure.
Attackers compromised camera management software (CMS.exe) to gain initial access to multiple organizations. They deployed malware (rs.win32.exe) into user AppData directories and used DLL sideloading with the legitimate Windows binary WpcMon.exe and malicious DLLs to establish beaconing to a command-and-control server. Persistence was maintained via Run Key registry modifications. The affected camera management software, possibly linked to 3R Global and kvision.ai, lacked sufficient security controls and logging. Organizations are advised to treat camera systems and their management platforms as critical attack surfaces and implement access controls and monitoring to detect unusual activity.
The npm package 'string-target-mapper-hash' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have gained full control of the system.
The npm package 'macro-kernel-record-reader' is identified as containing malicious code. Any system with this package installed or running is considered fully compromised, potentially allowing an attacker full control over the computer. Immediate rotation of all secrets and keys stored on the affected system is recommended, using a different, uncompromised machine. Removal of the package is advised, but it may not fully eliminate the malicious presence due to possible persistent backdoors or additional malware installed.
The npm package 'fetch-hash-cache-atomic' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, trusted machine. Removal of the package alone is insufficient to guarantee the elimination of all malicious software introduced by this package.
A malware campaign named Yoba exploits the popularity of AI tools like ChatGPT and Claude by distributing malicious installers through fake GitHub projects. These projects mimic legitimate desktop applications and use DLL sideloading with signed executables from OpenAI and Anthropic to evade security. The malware chain includes YobaDropper and YobaLoader, which deliver unwanted software such as XMRig cryptocurrency miners. The threat actor avoids traditional command-and-control infrastructure, relying instead on Telegram, Tor, Catbox, and DNS over HTTPS. The campaign appears to originate from actors in the UTC-4 timezone with possible Russian links and excludes CIS countries from infection.
Check Point Research identified a malware campaign named Yoba that abuses the popularity of AI tools like ChatGPT and Claude by creating fake GitHub projects impersonating AI desktop applications such as GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. These projects host malicious installers containing a dropper and loader that fetch and execute malware. The campaign uses DLL sideloading with legitimate signed binaries to evade detection and employs strong operational security by avoiding traditional command-and-control infrastructure, instead using Telegram, Tor, Catbox, and DNS over HTTPS. The threat actor shows indicators of Russian origin and operates primarily in the UTC-4 timezone. The malicious releases are hosted on GitHub without password protection, leveraging SEO poisoning to appear in top Google search results and lure victims.
