Plerdy · Exploitation reportedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
20 articles found · clear
- Plerdy · Exploitation reported
iCollections 9.7.2 para macOS · Exploitation confirmedFake iCollections site for macOS offers DMG flagged as malware
Nikke · Exploitation confirmedShift Up confirms NIKKE PC launcher tampering, ships security update
Videostrong Technology Set-top boxes Android… · Exploitation confirmedGoogle Dismantles 1.3 Million TV Box Botnet; Factory Backdoor Remains
Trezor Safe 5 vendida pela revenda CryptoBilis · Exploitation reportedSuspected Implant in Trezor Safe 5 Sold by Authorized Reseller CryptoBilis
Vários projetos de código aberto Repositórios… · Exploitation reportedRigged posts on 61 GitHub repos target CI pipeline secrets
Anthropic Extensão Claude Code para VS Code… · Exploitation confirmedCursor Confirms Claude Code Extension Backdoor; Up to 5,000 Hit
Hugging Face · Exploitation confirmedMalware campaign returns to Hugging Face, hijacks GPUs for mining
GNU Project GNU Savannah · Exploitation reportedResearchers hacked GNU Savannah; FSF fixed 26 flaws and published report
Build customizado do Windows 10 distribuído a… · Exploitation confirmedNetamLoader malware infects custom Windows 10 used by Asian governments
OpenAI e Anthropic · Exploitation confirmedFake ChatGPT and Claude Apps on GitHub Install XMRig Miner
Sistemas de atualização das ferramentas de… · Exploitation confirmedJurojin confirms tampered updates; malware exposed players' hole cards
npm / GitHub Pacotes npm da campanha testmetest · Exploitation confirmedtestmetest npm campaign armed 42 real GitHub repositories, JFrog says
Repositórios e branches no GitHub · Exploitation confirmedGheist: Logs Indicate Over 900 Confirmed Compromises, Says DFIR Report
LiteLLM · Exploitation confirmedLiteLLM ties malicious 1.107.0 to leaked key; users must rotate credentials
OVHcloud CLI · Exploitation confirmedOVHcloud CLI GitHub releases delivered credential stealer; v0.16.0 fixes it
eMudhra · Exploitation confirmedEight eMudhra intermediate CA keys were recoverable; fixes released
Repositórios e GitHub Actions · Exploitation confirmedGhostAction: 22,964 Repositories Targeted, 1,792 Accounts Compromised, Stolen Tokens Reused
tensorlake · Exploitation confirmedMalicious npm tensorlake release steals credentials and wipes home directory
SubQuery @subql/common · Exploitation confirmedMalicious @subql/common 5.8.3 steals credentials and opens backdoor