Malicious code in light-coffee-lizard (npm)

Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in exciting-sapphire-lizard (npm)

Source: amazon-inspector 95c545ba8efa110c9e44276a6563868bf85830f4e4eeabf044b2829d6423149d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in disturbing-salmon-lizard (npm)

Source: amazon-inspector fafe10c77c92190ffe63acea7168cff2f75528fc24c66651d43ce5187e8314ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in distinguished-blue-lizard (npm)

Source: amazon-inspector 7b625a537943025b8c0ce5f8385f208ba260b7be8173b85559aa8c02c895cccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in confidential-green-lizard (npm)

Source: amazon-inspector 2a2f1b5bac84b94eeef4216e54701e8d3d75a5bed3520193e7ed1f4acc7c6a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to...

SysAK security vulnerability

SysAK is a system operation toolset open source by China Dragon Lizard anolis. Versions of SysAK prior to v2.0 contained security vulnerabilities; these vulnerabilities stemmed from command execution, potentially allowing attackers to execute arbitrary commands...

EUVD-2025-117357

Malicious code in funny-bronze-lizard npm...

Malicious code in opposite_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc987bde819d69d3b60fbf504dbe6a2fd10c97ad31715b7af6b7af32cab913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99705

Malicious code in youngestlizardz3n npm...

EUVD-2025-101352

Malicious code in ultimatelizardz3n npm...

Malicious code in hon_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14694bcb167ce5db1930e7e1f1d8df3af7737bc5345ebe3de73c8244a4463a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102710

Malicious code in readylizardz3n npm...

EUVD-2025-99608

Malicious code in duelizardz3n npm...

EUVD-2025-95748

Malicious code in priorlizardz3n npm...

EUVD-2025-105977

Malicious code in criminallizardz3n npm...

EUVD-2025-89454

Malicious code in premierlizardz3n npm...

EUVD-2025-90321

Malicious code in lonelylizardz3n npm...

MAL-2025-115563 Malicious code in lonely_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30ef75eb8c680ae4791a21398fe0087a5d9234ec374dc7ccd671ab070ec6583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in premier_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b4dd2e33050b22c3964426ecb78185af349c4a337c2cb8dbae586ca63f7caf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...