The Ruby gem 'tron-trc20-utils' version 0.9.1 contains malicious code that executes a reverse shell during installation. The gem's extconf.rb file decodes and evaluates a base64-encoded payload that connects to a remote IP address and provides an interactive shell to the attacker. The malicious behavior is designed to evade sandbox and continuous integration environments by checking for specific environment variables, hostnames, usernames, working directories, system uptime, and the presence of developer artifacts. The gem's metadata and contents are inconsistent, indicating deception. This reverse shell is the primary functionality of the package, posing a significant security risk to users who install it.
The RubyGem package hd-wallet-generator version 0.9.1 contains malicious code embedded in its native extension build script. During installation, it decodes and executes a payload that opens a remote TCP shell to a hardcoded IP address, allowing remote command execution on the installer's machine. The payload includes multiple evasion checks to avoid detection in sandbox or analysis environments. No legitimate native code is built; the extension build script is a decoy. The package metadata and README are inconsistent, indicating a disguised dropper.
The RubyGem package nft-metadata-resolver version 0.9.1 contains a malicious native-extension script that executes a hidden payload during installation. This payload establishes a reverse shell connection to a hardcoded IP address, allowing remote code execution on the host. The malicious code includes sandbox evasion techniques to avoid detection in analysis environments. The package's metadata is inconsistent, misleading users about its true purpose.
The wallet-balance-scanner RubyGem version 0.9.1 contains malicious code that executes a reverse shell during installation. The gem's native extension script is a payload that decodes and runs a base64-encoded backdoor, connecting to a hardcoded command-and-control server. The backdoor activates only on developer workstations, using heuristics to avoid sandbox and CI environments. The rest of the gem's code is a cover story with no legitimate wallet scanning functionality.
The RubyGem 'ton-jetton-tools' version 0.9.1 contains malicious code in its native-extension build script (extconf.rb). This code decodes and executes a payload during gem installation that establishes a reverse shell connection to a remote IP, allowing remote command execution on the installer's host. The payload includes anti-analysis checks to evade detection in CI or sandbox environments and only activates if certain developer artifacts are present. The gem's metadata is inconsistent with its README, indicating an attempt to disguise its malicious intent.
The RubyGem package dex-router-abis version 0.9.1 contains malicious code in its extconf.rb script that executes automatically during installation. This script decodes and runs a base64-encoded Ruby payload which, after a delay, opens a reverse shell to a hardcoded remote host. The payload activates only on developer workstations with certain environment indicators and credentials present, allowing attackers interactive shell access with potential exposure of local SSH keys and publishing credentials.
The RubyGem 'wallet-hd-derive' version 0.9.1 contains malicious code that executes a backdoor during installation. The gemspec triggers execution of an encoded Ruby payload that performs sandbox evasion checks, then establishes a delayed reverse shell to a remote IP, allowing remote command execution on the host. The gem's library exposes only no-op methods and a misleading README, indicating it is solely a delivery vehicle for this backdoor.
The RubyGem 'perp-funding-rates' version 0.9.1 contains malicious code in its native-extension script that executes during installation. The script decodes and evaluates a hidden Ruby payload that establishes a reverse shell to a hardcoded command-and-control server, allowing remote code execution on the installer's machine. The payload activates only on developer workstations or build systems identified by the presence of specific user files, indicating a targeted attack. This behavior is obfuscated and delayed to evade detection.
The Ruby gem 'block-explorer-api' version 0.9.1 contains malicious code in its native-extension build script. This code decodes and executes a base64-encoded Ruby payload that establishes a reverse shell connection to a hardcoded command-and-control server. The payload activates only under specific conditions to evade detection, including anti-analysis checks and delays. The gem's advertised library is inert and does not match the gem's name or README, indicating deception.
The xrp-ledger-utils RubyGem version 0.9.1 contains malicious code embedded in its native extension builder. This code decodes and executes a base64-encoded Ruby payload that establishes a persistent remote shell connection to a hardcoded command-and-control server. The payload activates only on developer workstations, bypassing analysis environments, and provides an interactive shell to the attacker. The package itself has no legitimate functionality and is a malicious dropper disguised under unrelated project files.
The RubyGem 'gas-refuel-bridge' version 0.9.1 contains malicious code embedded in its native extension build script. During installation, it decodes and executes a hidden Ruby payload that establishes a persistent reverse shell to a remote server after a delay. The payload includes anti-analysis checks to avoid detection in CI environments or ephemeral systems and activates only on developer-like hosts. The gem's outward appearance is benign, with inert code and misleading documentation serving as a cover. This behavior poses a significant risk of unauthorized remote access on systems where the gem is installed.
The sol-mint-utils RubyGem version 0.9.1 contains malicious code that executes during installation. It runs a base64-decoded Ruby payload in a forked process, which opens a reverse shell to a hardcoded IP address, allowing remote command execution. The payload includes anti-analysis checks to avoid detection in CI environments, sandboxes, or short uptime systems, and only activates if developer artifacts are present on the host.
The PyPI package 'agent-vx' version 0.1.0 contains malicious code that installs a persistent job on the victim's machine. This allows attackers to exfiltrate files and execute remote commands, effectively functioning as a remote access trojan (RAT). The package is designed for persistence and unauthorized remote control.
The pafer package on PyPI contains malicious code that loads and executes a disguised pickle file, leading to automatic execution of embedded malicious code. This code establishes persistence on the victim's system via a PTH file, downloads additional payloads, and functions as a remote access trojan (RAT) enabling remote code execution and data exfiltration. The malicious behavior is intentionally embedded in a dependency of the main package webreader.
The PyPI package 'webreader' version 2.3.8 contains embedded malicious code disguised as a pickle configuration file. A related dependency 'pafer' loads this pickle, triggering automatic execution of malicious code during unpickling. This code establishes persistence via a PTH file, downloads additional payloads, and functions as a remote access trojan (RAT) enabling remote code execution and data exfiltration.
The npm package '@library-wide/library-shell' version 99.9.1 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior indicates the package may be used to facilitate harmful operations. No CVSS score is available for this threat.
The PyPI package media-manager5 version 0.1.0 contains malicious code that installs a persistent job on the victim's machine. This allows attackers to exfiltrate files and execute remote commands, effectively acting as a remote access trojan (RAT). The package is designed with clear malicious intent, including persistence mechanisms and limited remote command execution capabilities.
The agentaix package on PyPI contains malicious code that installs a persistent job on the victim's machine. This job enables attackers to exfiltrate files and execute remote commands, likely limited to a specific set, effectively acting as a remote access trojan (RAT). The package versions 0.1.0 and 0.2.0 are affected. There is no information about an available patch or remediation. No known exploits in the wild have been reported.
The npm package 'passwordcracker' is a malicious package masquerading as a dependency-free Discord MFA library. It pulls and executes code from an attacker-controlled GitHub repository and, on Windows systems, downloads and runs a hidden script that persists through multiple startup mechanisms and checks for updates regularly. It also contains offensive functionality targeting Discord API endpoints with operator-supplied credentials and disables TLS verification for Discord domains. The package was published by the npm account 'kingsize' with identical malicious code in versions 1.0.0 and 1.1.1.
The npm package passwordcrackv2 masquerades as a dependency-free Discord MFA library but includes a malicious dependency fetched from an attacker-controlled GitHub repository. This dependency executes code on load, and on Windows systems, it downloads and runs a hidden script that persists via multiple autorun mechanisms and checks for updates regularly. The package was published by the npm account kingsize on 2026-10-09 and 2026-10-10 with identical malicious code. This behavior enables remote code execution on the installer's system regardless of the intended Discord MFA functionality.