This threat involves a malicious package named 'dowload_ebok_batman_gotham_knights_2000_47_by_scott_beatty_judd_winick_roger_robinson_whilce_b0hk2' identified as malware. Installation or execution of this package results in full compromise of the affected computer, potentially exposing all stored secrets and keys. Immediate rotation of all credentials from a separate, uncompromised system is advised. Removal of the package alone may not fully eradicate the malicious presence due to possible persistent control by an external attacker.
CVE-2026-119340 is a vulnerability in Microsoft Tesseract version 4.0 involving the GENERIC_2D_ARRAY DeSerializeSize function. It allows a signed integer comparison bypass that can result in negative dimensions being processed.
A vulnerability in Tesseract version 4.0 involves a crafted LSTM model using the 'WeightMatrix' mode byte that triggers an ASSERT_HOST abort, potentially causing a denial of service. This issue is tracked as CVE-2026-119339 and is categorized under CWE-20 (Improper Input Validation). No CVSS score or patch information is currently available.
CVE-2026-119338 is a vulnerability in Tesseract version 4.0 involving a double free and use after free issue in the PAGE XML renderer when processing right-to-left pages. This flaw could lead to memory corruption.
The npm package 'dowload_ebok_yo_livia_by_phyllis_t_smith_zd5ec' is identified as malicious software. Any system with this package installed or running is considered fully compromised, with potential unauthorized control by an external entity. Immediate rotation of all secrets and keys stored on the affected computer is recommended. Removal of the package alone may not eliminate all malicious components.
The npm package 'dowload_ebok_womens_gymnastics_international_development_pro_by_mary_wright_jpaqm' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_schede_allenamento_massa_a_corpo_libero_by_muscle_trainer_qyk2b' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may lead to full system compromise, including exposure of secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised system is strongly advised.
The npm package 'dowload_ebok_clausola_d_amore_by_sierra_rose_8z8rv' contains malicious code that can fully compromise any computer on which it is installed or running. Removal of the package alone may not eliminate all malicious software, and all secrets and keys stored on the affected system should be rotated immediately from a secure, unaffected device.
The npm package 'dowload_ebok_ramcharitmanas_by_tulsidas_1ad93' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_last_girl_before_freeway_by_leslie_bennetts_gawz2' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removal of the package alone does not guarantee the elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_holding_by_graham_norton_z7c7t' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone does not guarantee eradication of all malicious software introduced by it.
The npm package 'dowload_ebok_12_dias_para_atualizar_sua_vida_by_tiago_brunet_m123o' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise may allow an attacker to gain full control over the affected system. Immediate removal of the package is advised, but due to potential persistent malicious software, complete remediation may require additional actions such as rotating all secrets and keys from a different, secure computer.
ARTEX is an AI-enabled penetration testing framework originally designed for authorized security testing but quickly adopted by threat actors for criminal and targeted intrusion campaigns. It automates and accelerates the attack chain by breaking objectives into tasks executed by worker agents using various security tools, significantly lowering the skill threshold and compressing attack timelines. ARTEX and similar AI-enabled frameworks integrate open-source tools and internet services to perform reconnaissance, vulnerability scanning, credential theft, and data exfiltration. Multiple threat actors, including financially motivated cybercriminals and China-nexus groups, have used ARTEX in campaigns targeting sectors such as government, telecommunications, defense, pharmaceuticals, semiconductors, and finance across multiple countries. The rapid and autonomous nature of these frameworks presents significant challenges for detection, mitigation, and incident response, emphasizing the need for automated defensive measures and robust response plans.
The npm package 'dowload_ebok_your_3_best_super_powers_by_sonia_choquette_ph_d_o2r9o' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Removal of the package alone does not guarantee elimination of all malicious software introduced. Immediate rotation of all secrets and keys from a different, uncompromised computer is strongly advised.
The npm package 'dowload_ebok_the_rule_of_benedict_by_joan_chittister_7haop' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eliminate the malicious presence due to potential persistent control by an external entity.
The npm package 'dowload_ebok_the_education_of_augie_merasty_by_joseph_auguste_merasty_g6pzs' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removing the package alone may not eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_my_good_life_in_france_by_janine_marsh_k5xex' contains malicious code that fully compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removal of the package alone may not eliminate all malicious software introduced by the installation, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_love_with_aftershocks_by_emma_smith_2vixi' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_les_miracles_de_l_archange_michael_by_doreen_virtue_ti6n1' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_doedl_methode_by_tim_reichel_niupi' contains malicious code that fully compromises any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.