MAL-2025-50681 Malicious code in vina-tahu61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52579632a72556320135471eff0c38c4636f50e035332e1f4e1e6379bd17c19 The package vina-tahu61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in candra-rangginang22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcc6965fce446766166a926e4c21ac4a38a06ae68a092ab7a008240eedcde71 The package candra-rangginang22-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in bayu-nasi97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c27ec70fb658615b05a3286a119cc1cd184b415844a3165a18d33ef8649a97 The package bayu-nasi97-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-52654 Malicious code in vina-keraktelor17-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf20e9698dd372299ab46c8d90da98e4ad6634059600abb55bcf04832d2769b2 The package vina-keraktelor17-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50962 Malicious code in bayu-klanting99-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe56bccaea476b007123413cc15b225409a9e5194aeaf5f26bcdf8915c98a The package bayu-klanting99-pore was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in vera-serabi34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89a57859fd00b9ae65e2373d0b6243bc4976daf7da7c600468824f4efb64127 The package vera-serabi34-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51327 Malicious code in cindy-bakso17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f8237b74237d99c86364b3f3193f53b6c1743bacc8ed4d41596bbb7f344f62 The package cindy-bakso17-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50354 Malicious code in erwin-tapai13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73680f388ef27c6e94a014442ede09a45b412b272911325e98fb2f4f7b223452 The package erwin-tapai13-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50501 Malicious code in tania-mendut22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9705be2724dbc42d1093e1b3825bf7dfb482c9a9c9c0e74ce9761ccf5f1f7e The package tania-mendut22-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

The 7 Best Continuous Threat Exposure Management Tools

If your security team is drowning in a sea of "critical" alerts from your vulnerability scanner, you know the feeling of being busy without being effective. You spend all your time triaging and patching, but you never feel like you're actually ahead of the attackers. This is the core problem that...

What Is Attack Surface Mapping And Why It’s Critical To your Security Program

You might think an attack surface mapper is just another name for a vulnerability scanner, but they serve two very different purposes. A scanner tests the assets you already know about for specific weaknesses. An attack surface mapper answers a more fundamental question: What assets do I even hav...

Securing AI Agents with Wiz AI-SPM

How Wiz brings visibility, context, and continuous defense to the new era of intelligent automation...

The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations

Security Operations Centers SOC today are overwhelmed. Analysts handle thousands of alerts every day, spending much time chasing false positives and adjusting detection rules reactively. SOCs often lack the environmental context and relevant threat intelligence needed to quickly verify which aler...

What Are Attack Surface Intelligence Exposures?

Do you know every single digital asset your organization owns? For most security leaders, the honest answer is no. Between shadow IT, forgotten development servers, and complex cloud environments, your true attack surface is full of blind spots. These unknown and unmanaged assets are where...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in v3djobupdatestats The following kernel Oops was recently reported by Mesa CI: 800.139824 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000588 800.148619 M...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/smc: fixed a UAF issue after smclistenout BPF CI testing reports a UAF issue: 16.446633 BUG: kernel NULL pointer dereference, address: 0000000000000030 16.447134 PF: supervisor read access in kernel module 16.447516 PF:...

How are you managing cloud risk?

Learn why managing cloud risk demands unified visibility, continuous risk assessment, and efficient security operations. Discover how a full-featured CNAPP like Trend Vision One™ Cloud Security enables organizations to move from reactive to proactive cloud protection...

5 Best Threat Exposure Management Tools for 2025

A long list of vulnerabilities without context isn't a security strategy—it's just noise. Legacy vulnerability scanners are great at finding potential flaws, but they often fail to answer the most important question: "What should we fix right now?" This is why Threat Exposure Management TEM...

The Death of the Security Checkbox: BAS Is the Power Behind Real Defense

Security doesn't fail at the point of breach. It fails at the point of impact. That line set the tone for this year's Picus Breach and Simulation BAS Summit , where researchers, practitioners, and CISOs all echoed the same theme: cyber defense is no longer about prediction. It's about proof. When...

MAL-2025-49099 Malicious code in @raux/ra-react-big-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2a212e56b9bc45f8e1a5ba0e12813f0d333c9d77c3d94b1ec81b8bdd42655580 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...