Threats Tagged 'mal-2026-10462'
View all threats tagged with 'mal-2026-10462'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-10462'
Click on any threat for detailed analysis and mitigation recommendations
The npm package 'hehehee' version 1.0.9 contains malicious code masquerading as a Windows diagnostic and DOM utility. It stealthily injects a hardcoded ChatGPT session token into an Electron session, enabling the package author to capture all screenshots and UI-extracted text sent through ChatGPT. The package also persists on the system by copying an Electron executable to mimic a legitimate Windows system binary and respawns itself with randomized delays, evading termination. It further employs anti-proctoring techniques to avoid detection in exam environments and automatically installs missing native modules without user consent. This behavior constitutes a supply-chain attack that compromises user privacy and system integrity. Join the discussion | GCVE Database | 07/13/2026, 17:48:34 UTC Added: 07/14/2026, 09:21:59 UTC |
Showing 1 to 1 of 1 result