The RubyGem 'wallet-hd-derive' version 0.9.1 contains malicious code that executes a backdoor during installation. The gemspec triggers execution of an encoded Ruby payload that performs sandbox evasion checks, then establishes a delayed reverse shell to a remote IP, allowing remote command execution on the host. The gem's library exposes only no-op methods and a misleading README, indicating it is solely a delivery vehicle for this backdoor.
The RubyGem 'perp-funding-rates' version 0.9.1 contains malicious code in its native-extension script that executes during installation. The script decodes and evaluates a hidden Ruby payload that establishes a reverse shell to a hardcoded command-and-control server, allowing remote code execution on the installer's machine. The payload activates only on developer workstations or build systems identified by the presence of specific user files, indicating a targeted attack. This behavior is obfuscated and delayed to evade detection.
The Ruby gem 'block-explorer-api' version 0.9.1 contains malicious code in its native-extension build script. This code decodes and executes a base64-encoded Ruby payload that establishes a reverse shell connection to a hardcoded command-and-control server. The payload activates only under specific conditions to evade detection, including anti-analysis checks and delays. The gem's advertised library is inert and does not match the gem's name or README, indicating deception.
The xrp-ledger-utils RubyGem version 0.9.1 contains malicious code embedded in its native extension builder. This code decodes and executes a base64-encoded Ruby payload that establishes a persistent remote shell connection to a hardcoded command-and-control server. The payload activates only on developer workstations, bypassing analysis environments, and provides an interactive shell to the attacker. The package itself has no legitimate functionality and is a malicious dropper disguised under unrelated project files.
The RubyGem 'gas-refuel-bridge' version 0.9.1 contains malicious code embedded in its native extension build script. During installation, it decodes and executes a hidden Ruby payload that establishes a persistent reverse shell to a remote server after a delay. The payload includes anti-analysis checks to avoid detection in CI environments or ephemeral systems and activates only on developer-like hosts. The gem's outward appearance is benign, with inert code and misleading documentation serving as a cover. This behavior poses a significant risk of unauthorized remote access on systems where the gem is installed.
The sol-mint-utils RubyGem version 0.9.1 contains malicious code that executes during installation. It runs a base64-decoded Ruby payload in a forked process, which opens a reverse shell to a hardcoded IP address, allowing remote command execution. The payload includes anti-analysis checks to avoid detection in CI environments, sandboxes, or short uptime systems, and only activates if developer artifacts are present on the host.
The PyPI package 'agent-vx' version 0.1.0 contains malicious code that installs a persistent job on the victim's machine. This allows attackers to exfiltrate files and execute remote commands, effectively functioning as a remote access trojan (RAT). The package is designed for persistence and unauthorized remote control.
The pafer package on PyPI contains malicious code that loads and executes a disguised pickle file, leading to automatic execution of embedded malicious code. This code establishes persistence on the victim's system via a PTH file, downloads additional payloads, and functions as a remote access trojan (RAT) enabling remote code execution and data exfiltration. The malicious behavior is intentionally embedded in a dependency of the main package webreader.
The PyPI package 'webreader' version 2.3.8 contains embedded malicious code disguised as a pickle configuration file. A related dependency 'pafer' loads this pickle, triggering automatic execution of malicious code during unpickling. This code establishes persistence via a PTH file, downloads additional payloads, and functions as a remote access trojan (RAT) enabling remote code execution and data exfiltration.
The npm package '@library-wide/library-shell' version 99.9.1 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior indicates the package may be used to facilitate harmful operations. No CVSS score is available for this threat.
The PyPI package media-manager5 version 0.1.0 contains malicious code that installs a persistent job on the victim's machine. This allows attackers to exfiltrate files and execute remote commands, effectively acting as a remote access trojan (RAT). The package is designed with clear malicious intent, including persistence mechanisms and limited remote command execution capabilities.
The agentaix package on PyPI contains malicious code that installs a persistent job on the victim's machine. This job enables attackers to exfiltrate files and execute remote commands, likely limited to a specific set, effectively acting as a remote access trojan (RAT). The package versions 0.1.0 and 0.2.0 are affected. There is no information about an available patch or remediation. No known exploits in the wild have been reported.
The npm package 'passwordcracker' is a malicious package masquerading as a dependency-free Discord MFA library. It pulls and executes code from an attacker-controlled GitHub repository and, on Windows systems, downloads and runs a hidden script that persists through multiple startup mechanisms and checks for updates regularly. It also contains offensive functionality targeting Discord API endpoints with operator-supplied credentials and disables TLS verification for Discord domains. The package was published by the npm account 'kingsize' with identical malicious code in versions 1.0.0 and 1.1.1.
The npm package passwordcrackv2 masquerades as a dependency-free Discord MFA library but includes a malicious dependency fetched from an attacker-controlled GitHub repository. This dependency executes code on load, and on Windows systems, it downloads and runs a hidden script that persists via multiple autorun mechanisms and checks for updates regularly. The package was published by the npm account kingsize on 2026-10-09 and 2026-10-10 with identical malicious code. This behavior enables remote code execution on the installer's system regardless of the intended Discord MFA functionality.
Noir is a cryptocurrency wallet-drainer malware kit that uses DNS TXT records and DNS-over-HTTPS (DoH) as a dynamic command-and-control mechanism. It queries public DoH services to locate active infrastructure hosted on Cloudflare Pages, enabling operators to redirect phishing lures by changing a single DNS record. The malware does not require victims to input seed phrases or private keys but instead requests wallet connection permissions and spending approvals, which appear less suspicious. Its architecture separates long-lived phishing lures from short-lived operational infrastructure, with DNS caching and retry logic. The kit is AI-assisted, with extensive code comments documenting its development, and is used across multiple cryptocurrency-themed phishing campaigns.
The npm package @fer2809fl/baileys contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, requiring immediate rotation of all secrets and keys from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The cloud-baileys npm package versions 1.0.0 through 1.1.42 contain malicious code. Installing or running this package can lead to full system compromise, potentially exposing all secrets and keys stored on the affected computer. Removal of the package does not guarantee elimination of all malicious software introduced. Immediate secret and key rotation from a separate, uncompromised system is strongly advised.
The arsya-baileys npm package version 9.2.0 and related versions are malicious forks of the Baileys WhatsApp Web library. They inject code that silently subscribes the victim's WhatsApp account to attacker-controlled channels by issuing authenticated FOLLOW queries using the victim's own session. The target channels are obfuscated or dynamically fetched, allowing attackers to change targets after installation. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code.
The npm package '@myorder-frontend-commons/analytics' versions 3.0.0, 10.0.0, and 99.0.0 have been identified as malicious due to communication with a domain linked to malicious activity. This behavior classifies the package as a malicious software component within the supply chain.
The npm package 'kmf-i18n' version 100.100.102 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior classifies the package as a security threat in the software supply chain.