Malware · publisher
StepSecurity
4 reports on malware · 4 reports in all
Every mark is a report, newest first. A report opens on its page here, which links to the original.
All of StepSecurity in Research reportsEvery one of the 4 is a mark on the map. Named now: 1 to 4, newest first.
- Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
- Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
- Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
- The Hades Campaign: Graph ML PyPI Packages Deploy Cross-Platform Memory Scrapers, AI Analyst Misdirection, and a Wiper Deterrent
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP