The npm package 'parxleys' contains malicious code that can fully compromise any computer on which it is installed or running. This compromise may allow an attacker to gain full control over the system. Immediate removal of the package is recommended, but due to the potential extent of the compromise, removing the package alone may not eliminate all malicious software. All secrets and keys stored on the affected computer should be rotated from a separate, secure machine.
Suo5 is an HTTP/HTTPS-based tunneling tool exploited for pivoting attacks via compromised web servers to access internal networks. It supports multiple environments including Java, PHP, IIS/.NET, and Nginx, and relays TCP traffic enabling SOCKS5 proxy access. Deployment methods include file upload exploitation on IIS servers using renamed ASPX files and memory injection via Jenkins Script Console with Groovy scripts. Indicators of compromise include repeated POST requests in web logs, DLL files in Temporary ASP.NET Files directories, and PluginServletFilter chains in Java logs. Detection involves monitoring web request patterns, server-side behaviors, abnormal User-Agent headers, unauthorized URI access, and file modifications. Mitigations include restricting script execution capabilities and implementing network segmentation controls.
The Help Traffic Distribution System (TDS), attributed to the Hotejka affiliate program, is a tech support scam infrastructure active since 2017. It directs victims to call centers where social engineering is used to convince them to install remote desktop tools like UltraViewer, enabling persistent malicious access. The operation abuses Cloudflare Pages infrastructure to create hundreds of malicious domains daily. Infoblox's predictive detection has significantly reduced exposure by identifying malicious domains before deployment. The scam uses browser locks with fake Microsoft warnings to coerce victims.
The @flexmr/survey-conversation npm package contains malicious code due to its sole dependency being declared as a bare HTTPS URL, allowing arbitrary code execution from an external source. This design enables whoever controls the external host to execute any code on the installer's machine. The package is associated with a dependency-confusion attack and should be considered fully compromising any system where it is installed.
The npm package @flexmr/survey-client version 10.0.12 and several other versions declare a dependency as a bare HTTPS URL pointing to an external host unrelated to the official npm registry. This external host controls the code executed during installation, allowing arbitrary code execution on the installer's machine. The package exhibits dependency confusion markers and placeholder metadata inconsistent with a legitimate package, indicating malicious intent. Any system with this package installed should be considered fully compromised.
The fromthehotel-poems PyPI package version 0.1.0 includes a function getdaily() that fetches and executes remote Python code from an external server without verification. This allows whoever controls the server or can tamper with the response to execute arbitrary code with the full privileges of the calling process. The package is identified as malicious, with intent to exploit large language model agents by hiding remote code execution within its API.
Variola is a modular Windows malware implant linked to a ClickFix intrusion, designed for persistent host identity and secure command-and-control communications. It supports dynamic loading of modules for credential theft, browser manipulation, and session hijacking, with capabilities typical of banking trojans such as Chromium browser injection and VNC-style remote access. The implant uses strong cryptographic methods for communication security and shows active development with multiple builds found in a public GitHub repository. No patch or remediation information is provided, and no known exploits in the wild have been reported.
The npm package 'asistenyorstore' version 8.0.14 contains malicious code that uses an authenticated WhatsApp session to auto-follow newsletters controlled by the package author. The package fetches remote JSON lists from mutable URLs and issues follow requests on behalf of the installer's account without exfiltrating credentials or executing remote code. Despite no direct data theft, any system with this package installed should be considered fully compromised due to potential unauthorized control. Immediate removal and secret/key rotation are advised.
The PyPI package 'proxyrobika' version 0.1.0 contains malicious code designed for automated file exfiltration. This package is part of a campaign targeting Android devices with clear malicious intent, specifically infostealing activities.
Malicious packages impersonating popular Arch Linux AUR helpers 'yay' and 'paru' were uploaded to the Arch User Repository (AUR). These trojanized packages contained legitimate code combined with malicious installation scripts that executed remote shell scripts with root privileges. The malicious packages were quickly removed and the uploader banned. Users who installed these packages should assume compromise and take remediation steps.
KGB RAT is a Windows Remote Access Trojan actively marketed on underground forums since late 2025. It is sold as Malware-as-a-Service with prices ranging from $150 to $800. The malware includes features such as credential theft, keylogging, hidden desktop takeover, ransomware, and psychological harassment tools like screamers and forced blue screens. It uses a daily updated fully undetectable (FUD) crypter to evade detection by Windows Defender and communicates with its command and control (C2) servers without requiring port forwarding. Notifications are delivered via Telegram. The malware is based on the NjRAT framework and includes a CryptoClipper module that swaps cryptocurrency wallet addresses. Development reportedly began in early 2022.
The npm package buyerdashboard@45.3.4 contains malicious code that executes during installation. Its preinstall script runs a Node.js script that sends a request to an external domain with a hardcoded authorization token, disclosing the installing host's public IP and metadata without user consent. The package also depends on a suspicious similarly named package that shadows a core Node module, indicating potential dependency confusion. The package's metadata and versioning suggest it is designed to evade detection and perform unauthorized data exfiltration.
The npm package xapi-lib versions 88.2.3, 88.2.5, 90.2.1, and 90.3.1 contains malicious code that executes a preinstall script during npm install. This script sends an HTTP request with a hardcoded authorization header to an external domain unrelated to the package's stated functionality, potentially exposing the installer's IP and environment. The package itself provides no legitimate library functionality and is considered fully malicious.
The npm package web-pixels-manager@76.2.4 is a typosquatted malicious package impersonating Shopify's @shopify/web-pixels-manager. It executes a preinstall script that makes an outbound HTTPS request to a non-affiliated domain realwbx.com with a hardcoded authorization token. This behavior enables the operator of realwbx.com to track installations of the package, effectively creating a victim check-in channel.
The Aoki infostealer malware has recently evolved to target credentials from AI coding assistants such as Claude, OpenAI's Codex, Cursor, Codeium, and Gemini. It steals API keys, tokens, and session files that could allow attackers to impersonate legitimate users and access connected repositories, cloud services, and CI/CD pipelines. In addition to AI-related credentials, Aoki collects data from browsers, cryptocurrency wallets, password managers, messaging apps, gaming platforms, VPN and FTP clients. The stolen data is sent to command-and-control servers. This indicates that AI credentials are increasingly valuable to cybercriminals, alongside traditional targets like payment card data and cryptocurrency wallets.
The npm package idlive-face-capture-web-development@78.8.1 contains malicious code that executes a preinstall script making an unauthorized HTTPS request to a third-party server with a hardcoded authorization token. This behavior leaks the installer's IP address, User-Agent, and install timing, confirming successful execution to an attacker-controlled server. The package identity is inconsistent and indicative of a dependency confusion or typosquatting attempt. Installation of this package may lead to full compromise of the host system.
CikaBika Bot is a Rust-based Remote Access Trojan (RAT) distributed via phishing emails containing malicious document-themed lures. It uses Discord channels for command-and-control (C&C) communications and provides attackers with capabilities including system reconnaissance, remote command execution, process management, file upload/download, and surveillance functions such as screenshots and camera streaming. The malware employs a multi-stage infection chain involving a decoy document, PowerShell scripts, and DLL sideloading to evade detection and bypass User Account Control (UAC). Data exfiltration is facilitated through Ngrok tunnels. The malware leverages legitimate services like Discord and Ngrok to mask its operations.
Hirudo is a novel Android remote access trojan (RAT) that combines traditional banking trojan features with full remote control capabilities. It replaces legitimate Indonesian banking apps with trojanized versions that bypass app integrity checks by hooking internal security mechanisms. The malware enables live screen viewing, remote camera access, SMS collection, and credential theft. It is delivered via trojanized apps advertised on social media and currently targets eight Indonesian banking apps, with potential to target banks in other countries. Hirudo shifts the security contest from the device level to the application level by tampering inside the target app itself.
The getpubip package on PyPI contains malicious code that executes an obfuscated payload during import. This payload downloads and runs an infostealer that exfiltrates browser data. The malicious code is hidden using string reversal, base64 decoding, and zlib decompression, making it difficult to detect. The package falsely advertises itself as a simple tool to retrieve the host's public IP address. Any user importing or running the package executes the concealed malicious code without further action.
The py-worm package on PyPI contains malicious code in its agentaix module that downloads and executes a mutable remote Python script without user visibility on Windows. This remote script acts as a remote access trojan (RAT), enabling persistence via an HKCU Run registry entry, polling a command server for instructions, and supporting file upload, download, deletion, and command execution. Versions 0.1.0, 2.0.0, and 2.0.1 of py-worm are affected. The remote payload is mutable, meaning its exact behavior can change over time. This package is classified as malware due to its clear intent to exfiltrate files, maintain persistence, and execute remote commands.
