Exploited vulnerabilities and malicious packages from CISA KEV, EPSS and OSV, merged into one feed. Checked every 10 minutes. Not every CVE: only the ones with proof of attacks or malware.
dsh-moss-wallpaper (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
@vanzxy/baileys (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
@systemzero/baileys (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
latest-update-my-talking-angela-h-a-c-k-gen-erat-or-q8z42f (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
rootaccessxvv-bbmarker (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
@vanzxy/nusa (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
@lynnidoffc/libsignal-node (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
gvmabc (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
ru0z83 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
g3ypjg (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
3zqth8 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
updated-today-gen-photo-lab-pro-h-a-c-k-gen-erat-or-ofgpju (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
t6unrv (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
updated-gen-erator-rainbow-six-mobile-h-a-c-k-gen-erat-or-1179lh (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
v36sl2 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
more-resour-ces-gen-stickman-legends-f-r-e-e-h-a-c-k-gen-erat-or-bv4n15 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
wyrj3i (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
2tyegs (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
jd7ijw (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
s775oe (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
rtvu6h (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
kojs0k (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
ll3zea (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
real-gen-erator-one-shade-h-a-c-k-gen-erat-or-8ks294 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
ib3rwn (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
new-code-unlim-ited-jurassic-world-m-od-f-r-e-e-wuo1ky (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
working-today--empire-takeover-h-a-c-k-gen-erat-or-akcp8z (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
more-resour-ces-gen-daylio-h-a-c-k-gen-erat-or-qvi0r6 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
gene-rator-new-hearthstone-h-a-c-k-gen-erat-or-9wy4b5 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
qxjf8r (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
updated-gen-erator-producer-h-a-c-k-gen-erat-or-g8pi55 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
more-resour-ces-gen-disney-mirrorverse-h-a-c-k-gen-erat-or-gulnxl (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
winjb6 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
updated-gen-erator-carx-drift-racing-h-a-c-k-gen-erat-or-tkfm7v (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
j5ugvu (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
l52upm (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
1b67v5 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
k7nhgj (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
9ct8bi (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
@shein-risk/si_verify (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
gene-rator-new-rope-hero-h-a-c-k-gen-erat-or-azkrvc (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
bznio5 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
new-code-unlim-ited-my-time-at-portia-h-a-c-k-gen-erat-or-i477p4 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
more-resour-ces-gen-tailed-demon-slayer-h-a-c-k-gen-erat-or-yas2jz (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
u0bh1f (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
5df897 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
updated-today-gen-dr-parking-4-h-a-c-k-gen-erat-or-hmdcsa (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
wolce9 (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
sgj0kx (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
j4pe0w (npm) is a malicious package. Anyone who installed it should treat that machine as compromised: remove the package and rotate any secrets it could reach.
Summaries are written by AI from the linked sources and regenerated when a source changes.