Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in 0vulns-dependency-confusion-poc (npm) 0 The package communicates with a domain associated with malicious activity. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (3d282025fb2ec1b4012e3b979cec1f66520e643fcadfd2864e54989de50dd00d) The package.json preinstall script runs `wget` against an attacker-controlled webhook.site URL, passing `$(whoami)`, `$(pwd)`, and `$(hostname)` as query parameters, executing automatically on `npm install`. This matches the npm-lifecycle-external-fetch and credential/telemetry exfiltration patterns (findings a static pattern match, a static pattern match, a static pattern match, a static pattern match, a static pattern match). the analysis confirms contextually that the script performs reconnaissance exfiltration to a non-registry collector, and config.unsafe-perm is set to ensure execution. the analysis further notes that the declared main entrypoint is missing and the tarball contains only package.json — the package exists solely to trigger the beacon, with no legitimate runtime functionality. Self-identification as a 'PoC' does not change the risk to an unintended installer (e.g., via dependency confusion). ## Source: ghsa-malware (66a5014b00cbe1f0b68f513878acb21a0801758710524c715d837ef999ad3752) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it. Join the discussion | GCVE Database | 06/12/2025, 17:49:59 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in 0xpolygonhermez (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ Join the discussion | GCVE Database | 04/23/2025, 15:41:47 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in 33-js-concepts (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ Join the discussion | GCVE Database | 06/25/2024, 12:24:19 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in 3952955c8e968410 (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ Join the discussion | GCVE Database | 03/03/2025, 13:14:33 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in 511fola (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0cb9d65067967eb3823731d9beecb461b0746c872d8ba438280cbfa55e572eb2) The package 511fola was found to contain malicious code. Join the discussion | GCVE Database | 01/02/2026, 22:06:48 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in 8jfiesaf83 (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5ef67af98dc92779c9c7da804d6673f1838980f53e7376335dae65a375877a2e) The package 8jfiesaf83 was found to contain malicious code. Join the discussion | GCVE Database | 11/03/2025, 18:59:00 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in @1nderman/betterconsole (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ Join the discussion | GCVE Database | 09/26/2025, 09:15:03 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in @2011-08-19/n (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ Join the discussion | GCVE Database | 07/07/2026, 12:16:05 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in @3stripes/components (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (31ba4725ff03b9b0a4645734fca9af46fbd145e147f7fb7ee0942853c425f53f) The package @3stripes/components was found to contain malicious code. Join the discussion | GCVE Database | 04/16/2026, 09:28:26 UTC Added: 09/01/2026, 15:45:32 UTC |
Malicious code in @3stripes/config (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (9fea72a3f12c815ec03d587d20386eb4726c301d381fa23d720c25dc903bdcb4) The package @3stripes/config was found to contain malicious code. Join the discussion | GCVE Database | 04/16/2026, 09:28:27 UTC Added: 09/01/2026, 15:45:32 UTC |
Showing 1 to 10 of 17848 results