⤷ Title: New Malware Found in npm Package “fezbox” Uses QR Codes to Steal Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 02:17:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #fezbox #Infostealer #javascript #malware #npm #QR code #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 02:17:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #fezbox #Infostealer #javascript #malware #npm #QR code #supply chain attack
Daily CyberSecurity
New Malware Found in npm Package "fezbox" Uses QR Codes to Steal Credentials
A new malicious npm package, "fezbox," hides a credential-stealing payload within a QR code, which it uses to exfiltrate web cookies and credentials.
⤷ Title: Steganography Attack: Malicious NPM Package Hides Executable Code Inside a QR Code Image
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 03:56:47 +0000
════════════════════════
⌗ Tags: #Malware #fezbox #JavaScript #malware #npm #open source security #QR code #Steganography #supply chain attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 03:56:47 +0000
════════════════════════
⌗ Tags: #Malware #fezbox #JavaScript #malware #npm #open source security #QR code #Steganography #supply chain attack
Penetration Testing Tools
Steganography Attack: Malicious NPM Package Hides Executable Code Inside a QR Code Image
The NPM package fezbox uses an inverted URL and steganography to hide executable JavaScript inside a QR code image to steal credentials. Update ASAP.Export to Sheets