Threats Tagged 'mal-2026-5916'
View all threats tagged with 'mal-2026-5916'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-5916'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in nottuff25 (npm) 0 The npm package 'nottuff25' version 1.7.7 is identified as malicious. It misrepresents itself by shipping a browser ServiceWorker and a static site unrelated to its advertised purpose. The package contains a bash script that automates mass publication of numerous sibling malicious packages, indicating a coordinated namespace-pollution campaign. Additionally, it includes browser-side adware that opens a popunder on user interaction. There is no evidence of install-time remote code execution or credential theft, but the package's presence indicates a compromised environment. Join the discussion | GCVE Database | 06/16/2026, 19:27:25 UTC Added: 07/13/2026, 09:19:18 UTC |
Showing 1 to 1 of 1 result