Threats Tagged 'mal-2026-14152'
View all threats tagged with 'mal-2026-14152'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14152'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in typescriptt-core (npm) 0 The typescriptt-core npm package is a typosquatting malicious package impersonating the TypeScript ecosystem. It contains no legitimate functionality but runs a post-install script that XOR-decodes a hidden URL and PowerShell command. On Windows, it downloads and executes a malicious executable from a GitHub release URL. On Windows Subsystem for Linux (WSL), it invokes PowerShell on the Windows host to perform the same action. Additionally, it sends a beacon with host platform information to a hardcoded IP address over unencrypted HTTP. The package affects version 1.0.0 and is designed to evade static analysis by obfuscating its payload and commands. Join the discussion | GCVE Database | 08/18/2026, 23:20:55 UTC Added: 08/19/2026, 13:51:07 UTC |
Showing 1 to 1 of 1 result