EUVD-2025-49973

Malicious code in integratedcobraz3n npm...

EUVD-2025-50703

Malicious code in anxiouscobraz3n npm...

EUVD-2025-49759

Malicious code in narrowcobraz3n npm...

EUVD-2025-49020

Malicious code in wonderfulcobraz3n npm...

MAL-2025-61546 Malicious code in urban_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a3c8fc59135099de71705130769b28bfbb7ccd908d9681c00ad32fcca7f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c760f4ea94aaf2d7bcddf456c4414bb0ad457080c8db8c0686a97b6298f6f79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49606

Malicious code in presentcobraz3n npm...

EUVD-2025-49622

Malicious code in possiblecobraz3n npm...

Malicious code in weak_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbf3cf9f93869edd8e05ea1f85f40552f4415c6b1ef1dda2a82be48185695fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48236

Malicious code in curlycobraz3n npm...

Malicious code in wandering_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7725b833e9bbc4cce72ad274c6ab49611f60713070a366f50c9445d71ef7cfb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47807

Malicious code in experimentalcobraz3n npm...

MAL-2025-55739 Malicious code in curly_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2761c04a163928a9748465e7f6e77e47180556179a7bef3530eaff63de6ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44599

Malicious code in wanderingcobraz3n npm...

Malicious code in test-mlw2-cobra-recto (npm)

The package test-mlw2-cobra-recto was found to contain malicious code...

MAL-2025-35103 Malicious code in test-mlw2-cobra-recto (npm)

The package test-mlw2-cobra-recto was found to contain malicious code...

SUSE-SU-2025:20385-1 Security update for docker-compose

This update for docker-compose fixes the following issues: Update to version 2.33.1: Improvements - Add support for gwpriority, enableipv4 requires docker v28.0 by @thaJeztah in 12570 Fixes - Run watch standalone if menu fails to start by @ndeloof in 12536 - Report error using non-file...

Malicious code in spiritual-magenta-cobra (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9862 Malicious code in spiritual-magenta-cobra (npm)

--- -= Per source details. Do not edit below this line.=-...

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

Threat actors have been observed targeting semiconductor companies in East Asia with lures masquerading as Taiwan Semiconductor Manufacturing Company TSMC that are designed to deliver Cobalt Strike beacons. The intrusion set, per EclecticIQ, leverages a backdoor called HyperBro, which is then use...