ICMacOS (Icarus macOS) is a macOS malware-as-a-service stealer marketed since September 2026 by a Russian-speaking actor. It targets macOS Sierra through current versions on both Intel and Apple Silicon architectures. Initially a credential stealer, it evolved into a persistent remote access trojan (RAT) with WebSocket-based command-and-control. Infection uses social engineering with fake system dialogs to harvest administrator passwords and deploy the payload. Version 1 steals browser credentials, cryptocurrency wallets, developer secrets, messaging data, and password managers. Version 2 adds RAT features with persistence and interactive shell access, expanding data theft to Steam accounts, Outlook data, and more password managers.
DarkCore is a remote access trojan (RAT) that steals credentials and hijacks user sessions by reusing stolen session cookies to access services like Gmail and WhatsApp. It routes traffic through victims' IPs to mimic legitimate activity and includes hidden virtual network computing (HVNC) for stealthy desktop access. Distributed via PDF-themed shortcuts that deliver decoy documents alongside malware, DarkCore communicates with its command-and-control servers over TCP and can load additional modules dynamically.
Three VBScript-based malware campaigns target victims primarily in Brazil and Portugal via phishing emails using fake legal and financial documents. These campaigns deliver Overlord RAT, Lampion trojan, and an unknown RAT through multi-stage execution chains involving obfuscated VBScript, batch files, and DLL side-loading with legitimate Windows components. The malware establishes persistence via scheduled tasks and registry modifications, evades detection by adding exclusions to Windows Defender and checking for virtual environments, and uses cloud services for payload delivery. Command and control infrastructure is based in Brazil.
The npm package '@azure-growth/signup-ux-components' version 1.2.2 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain linked to malicious activity. There is no CVSS score or detailed technical impact provided. No known exploits in the wild have been reported.
The npm package @camera.ui/camera-ui-nvr-windows-amd64 version 1.6.1 contains malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package does not guarantee elimination of all malicious software introduced by it.
The h13t0ry-hello-demo package on PyPI version 0.1.0 contains malicious code that initiates a reverse shell upon import. This behavior allows an attacker to execute arbitrary commands on the victim's machine, posing a significant security risk.
The npm package ctf-agent version 0.1.0 is identified as malicious. Although detailed static analysis found no direct evidence of credential theft, remote code execution, or backdoors, the package is considered fully compromising any system on which it is installed. Systems with this package should be treated as fully compromised, and all stored secrets and keys must be rotated from a clean environment. Removal of the package alone does not guarantee eradication of all malicious components.
The npm package csvflow-schema version 1.0.0 was found to contain malicious code in its postinstall script. This script collects local system information, writes it to a temporary file, launches the Windows calculator application, and sends an HTTPS request to a hardcoded external domain with a unique install identifier. The package was removed from npm shortly after publication.
The npm package @iobandamwer/native-helper is a malicious package that acts as a temporary placeholder stub but includes an active install-time dropper. It installs a native addon that decodes and executes an opaque payload outside the npm install process. The payload execution is gated to avoid CI environments, containers, and analysis sandboxes. Installing this package on a developer machine results in attacker-controlled code running detached from the installation process, potentially compromising the entire system.
The npm package 'path-stream-utils-testmetest' is a malicious package that includes a native addon executing an opaque payload during installation and runtime. It drops and executes a hidden file in /tmp, evades sandbox and CI environments by detecting various environment indicators, and runs encrypted code not inspectable from the package contents. Installation or use of this package compromises the host system, potentially granting full control to an attacker.
The npm package '@iobandamwer/cache-helper' is a malicious package masquerading as a cache utility. It contains no source code but includes prebuilt native binaries that execute a hidden payload during installation. This payload writes an opaque file to a temporary location, makes it executable, and runs it detached from the install process. The package includes extensive evasion techniques to detect CI environments, sandboxes, debuggers, and containerized environments, indicating it is designed to avoid analysis. Any system with this package installed should be considered fully compromised, and all secrets on that system should be rotated immediately.
The postcss-semantic-themes npm package contains malicious code that executes obfuscated JavaScript modules and includes native binaries performing extensive environment fingerprinting to evade analysis. It masquerades as a CSS theming kit but instead acts as a staged supply-chain malware payload, including brandjacking of the legitimate tailwindcss package name. Installation of this package compromises the host system, potentially exposing all stored secrets and keys.
The npm package harlow-css-mixer version 0.0.0-stage is identified as malicious software. Installation or execution of this package may lead to a full compromise of the affected computer. It does not contain installer secrets or network fetches, but its presence indicates potential unauthorized control. Immediate removal and secret/key rotation are advised to mitigate risks.
A sophisticated supply chain attack campaign involving 42 compromised GitHub repositories linked to the testmetest npm operation was identified. The attackers used compiled native addons that decrypt hidden payloads at runtime, employing extensive anti-analysis techniques to evade detection in CI environments. The campaign included credential theft, repository hijacking, forged commit timelines, and automated malicious package publishing via GitHub Actions using trusted npm publishing. The infrastructure is also connected to shellpanel exploitation targeting cPanel systems. The attackers deployed polymorphic wrappers embedding execution hooks for AI coding assistants and IDEs, with advanced environment detection to avoid execution in sandboxes, debuggers, and security tools.
A long-running malware campaign has infected 953 online stores, primarily Magento-based, with loader code that selectively serves malicious payloads to real visitors to evade detection. The campaign began in July 2025 and has used multiple domains for its JavaScript loader, with recent activity observed as late as October 2026. The loader performs visitor fingerprinting and has been delivered through exploitation of known Magento vulnerabilities and backdoors. Store owners are advised to check for loader code, vulnerabilities, backdoors, rogue admin accounts, and to apply the latest patches and security measures.
The netweavex package on PyPI is a malicious typosquat of the legitimate NetworkX library. It uses a lookalike name and clones the API and module layout to deceive users. Upon import, it executes obfuscated code that decompresses and runs attacker-controlled bytecode, which can download and execute additional malicious scripts. This behavior is characteristic of a PyPI typosquatting dropper designed to compromise the installer's system.
The zagents-framework package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It appears to be a low-risk package resembling pentest tools but with a hidden data exfiltration purpose.
The PyPI package 'changes-lxc-wrapper' is a malicious package that exfiltrates basic host information such as IP address and username upon installation or import. It masquerades under a misleading import namespace 'ca_certificates' that does not match its distribution name. While it does not perform harmful filesystem or network operations beyond data exfiltration, it overrides the install command to execute malicious code during installation.
The @worca/app npm package versions 1.14.0-rc.2 and 1.14.0-rc.4 contain malicious code that can fully compromise any computer on which it is installed or running. The package includes components resembling an egress-control proxy, telemetry channels, and local bridge/UI, with suspicious token co-occurrences detected in multiple core files. Removal of the package alone does not guarantee elimination of all malicious software, and all secrets and keys on the affected machine should be rotated immediately from a separate, trusted device.
The publish-poc-base npm package version 1.0.7 contains malicious code in its postinstall script. This script reads the first line of a README.md file from the installer's parent workspace, creates a temporary directory, and writes a new package.json and an .npmrc file containing a hardcoded npm registry authentication token. Although the package does not execute a publish step itself, it distributes a live third-party-usable publish credential in cleartext to all installers and harvests local README content at install time, raising significant supply-chain security concerns.
