Threats Tagged 'mal-2026-14188'
View all threats tagged with 'mal-2026-14188'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14188'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in sui-move-gql (npm) 0 The sui-move-gql npm package version 1.0.2 contains malicious code that, upon import, reads sensitive files from the installer's home directory, including Sui wallet keystore and AWS credentials. It exfiltrates this data by encoding it and sending it to a GitHub repository controlled by the attacker. The exfiltration endpoint and authentication token are dynamically fetched and obfuscated to allow runtime rotation, complicating detection and mitigation. The malicious code targets developer workstations with live Sui wallet keys and avoids execution in CI environments. After exfiltration, it overwrites its own code to remove evidence, hindering forensic analysis. Join the discussion | GCVE Database | 08/18/2026, 23:58:32 UTC Added: 08/19/2026, 13:51:06 UTC |
Showing 1 to 1 of 1 result