44064 matches found
MAL-2025-119660 Malicious code in eka-lontong96-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ce764728414dc73e54203a30c85d7f14f163e1b36a9b07168f5552d1743cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-120476 Malicious code in hadianto-mieayam45-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4860b07224b64cb55597e388a686437a07a45f5edfe661fee9bc040c208af501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-123076 Malicious code in rudi-sambel33-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75aa8f7a809e07dd8fac0c55e477216858264c13a02f25400fa16dc0ffb6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-118938 Malicious code in bella-tempe91-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41e142a08d9bee3a8fd29c897b3d029d993e976ac41e447102488ba46a09d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-119137 Malicious code in cindy-mendoan3-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da33ea9c1d935056b6c08066c792ca36e102fbd6cefce125ce694706a633bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-119707 Malicious code in eko-moci48-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e218b3f8ce6fb6ec070e97742d18f99a11a0b6e9fe01bd4b156c2a5ff8c453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-121454 Malicious code in limited_gecko_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754f1471c02b948f73faddafd152102a3a709544c55107e2b9e5ea2d3eb00160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-124212 Malicious code in wawan-botok42-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6bdfa6caad7bc0ec7b6fb14303294e0f28de560595c547996ae7d8fe61c48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-122298 Malicious code in ok_crab_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3940f1997853aa74547169fc64de507fdc93c5860b509d5dda1498977af21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-121767 Malicious code in married_leopard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc9fa635cde02cde24641a974bcdbc18094c9d09b2e51b2cc5ec278e54bc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-121122 Malicious code in joko-telur51-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487c92e63a50da7a89f1a5b7520de7067e9311f55543420618cf85e45a34bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-123119 Malicious code in sari-mie91-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9ca131b1a4bc869256c325eb5da0f47ac3aed95ca6fadba322f10c11483f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-121473 Malicious code in lina-kolak67-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92c1843d99d618797fbe26f290e161ff51966f855862c7ec100f63927e17565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-123869 Malicious code in universal_cephalopod_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919848118ff146effa4d4e5bb6982a16aa63366a8291542584062770a87eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks
Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. According to a report from CyberProof, both malware strains are written in .NET, target Brazilian users and banks, and...
CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122)
Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2025-88871
Malicious code in separateflyz3n npm...
Malicious code in dono-klanting79-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217d7cfab938bfdbb588b69f7ce74c384ef7a6f918c8a0f0393a866ece1ee8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hadi-donat80-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68180d6df92e3540833abd7cd40f410dbe2e9c2e50cc943c40f8d508f59a281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...