MAL-2025-62097 Malicious code in bella-tempe53-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901b9ddc5e03757920c5803834819e5bf74a87e5a8431db17f48eb0a0e578465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

📄 LINQPad File Overwrite

This Metasploit module exploits a bug in LINQPad up to version 5.48.00. The bug is only exploitable in the paid version of software. The core of the bug is a cache file containing deserialized data, which an attacker can overwrite with a malicious payload. The data gets deserialized every time th...

Siemens LOGO! 8 BM Devices

SUMMARY LOGO! 8 BM incl. SIPLUS variants contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends specific countermeasures for...

Malicious code in aggregate_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1884cd822485ed5047c3fe55d3b38e7df9261484c623ee3d95e9e17830d28b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d4ff817d78a04175775fc90295c101f7765f56f664dcc1e484adc2532f87ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60988 Malicious code in organisational_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf255ced1c3f37c58b15e2ea3fe88194c6066f86380053923c1c68ccb384fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eb13fcb75862b1971fcec1a17f7dc64d1e9e87565844ee70b8fad9ba51da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60810 Malicious code in managing_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132bb945a80d66d8d5cbf78cb5570ed9a24aa171df00cf977024754c13bd5578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ff1ee9ae5629b987836126652938e30ddfcb68eb154bf7dfe3ad5c43baca48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mieayam48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cc63a40d92825c60d734f056c78d6508241df493c2f44b11a7aabe95f9175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-klanting2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03beec5ded505308547bfc350f215abd04988338967c68f8c8d2ebf08556e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bika75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1ae7dd0b5fa8aa437cd64c170f2d92ccd9ce267d189b5704420374bc412a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a92e1aebe06bbee00a6d598f92ba2dc7f6f953f9ff1a8ea4acb1ad33519bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lepet71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45f9ad7e380edc016b78b2b99b254e54e5fd368919c2984ac1c5dc94802f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57220 Malicious code in kurnia-gaplek28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b877d15351e20166409c8d899e71f25f00e4cf67d591e478ba8ce0f46e3213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kripik58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 948bde4228d3ca6c44103d7987d6494451a700d5027ddf6dca5fa0514f6d01a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57934 Malicious code in ocha-keripik72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e1b72ee564c4d54d2b325eb0eb7b74556065e6a47d51cbff729323a3f81ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56992 Malicious code in jaja-sroto92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a1c409baaca90f88fc8e76b0562182b16dfc9a2bdf5ac2a14df69f8fdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

9 Key Areas to Monitor for Potential Security Threats

The old "castle-and-moat" approach to security is a thing of the past. Your organization's perimeter is no longer a single, defensible line; it's a distributed and porous collection of remote employees, cloud services, and third-party vendors. Every connection is a potential entry point, and your...

Malicious code in siska-sambel43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d3e16cd1e8d58db474dd0d20f8a9b2eb2e69549c503e6499a24395ded29ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...