Threats Tagged 'mal-2026-14017'
View all threats tagged with 'mal-2026-14017'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14017'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in bs58-33 (npm) 0 The npm package bs58-33 is a typosquatting package that re-exports a malicious dependency base65-33x. The base65-33x package exfiltrates any string passed to its decode() function by sending it via HTTP POST to a hardcoded command-and-control server. Since base-x/bs58 libraries are commonly used to decode cryptocurrency private keys and seeds, this exfiltration can leak sensitive secrets. The bs58-33 package was published alongside related malicious packages by the same maintainer in a coordinated campaign. Installing bs58-33 introduces this key-exfiltration behavior into dependent projects. Join the discussion | GCVE Database | 08/13/2026, 00:00:00 UTC Added: 08/14/2026, 16:36:01 UTC |
Showing 1 to 1 of 1 result