MAL-2025-50611 Malicious code in utomo-gorengan55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c643376d8b726fb3f6320be1bf74e14f800fe64e63581d36cb1a94349b84f561 The package utomo-gorengan55-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50180 Malicious code in dewanto-enting100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a665fc58c92a7ac5c3b63c273561383f8235b8a8218dc161ba9e385f0a261efd The package dewanto-enting100-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49945 Malicious code in budi-ketoprak16-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007986f1e302f4828d825d05b63895d441672b3eeca5e814e442849601f39c88 The package budi-ketoprak16-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51668 Malicious code in eko-keripik22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d588ac927f55cbf671977c31b7d94298cfcd7f0c0c1b4fbd0cb50b60c55319bc The package eko-keripik22-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-49927 Malicious code in bella-rawon49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cefcc19bdd59840ea251ea26b1a2771683c062565a9769e28160dc373125c2 The package bella-rawon49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51876 Malicious code in fauzi-sambalado60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59233e5a04e15ef5505a4f26813f8d35552ed19d1b5be2a54046cb01df6fdb5 The package fauzi-sambalado60-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50036 Malicious code in cici-donat26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a00064d50a1931fb6ae4fba406589a8c23edec6e6a3d048cf3b01c5482c0e91 The package cici-donat26-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51456 Malicious code in citra-serimuka83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b52fc037341fba2e106bc920ed34c2a6e6614ac273d1f4f5250fae4df4ede78 The package citra-serimuka83-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51161 Malicious code in budi-tahutek71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573cf7c820f1bb834124d25a8669574c873216be9caa56ff6861e9db321061dc The package budi-tahutek71-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-52669 Malicious code in vina-tahu84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a340ae4e4efc07154abeab05871f28df00849a00fd4492a240600b97f66c66 The package vina-tahu84-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51474 Malicious code in dewanto-jus5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b607fa1d67e073e9223eb0fd04b0f0b111d5a96b827578ece8915eb9416b4ff The package dewanto-jus5-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-52522 Malicious code in udin-klentik45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8b3b578fdc03a20c58bc8577846623033e74052db9e004e931b2ac06a48623 The package udin-klentik45-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50466 Malicious code in galih-sambel52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780be4e9bf61c9420e02012ffca20a318d968cb588494252deb9278ead11cb0c The package galih-sambel52-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Trustworthiness Calibration Framework for Phishing Email Detection Using Large Language Models

Phishing emails continue to pose a persistent challenge to online communication, exploiting human trust and evading automated filters through realistic language and adaptive tactics. While large language models LLMs such as GPT-4 and LLaMA-3-8B achieve strong accuracy in text classification, thei...

WordPress OOPSpam Anti-Spam plugin IP Header Forgery Vulnerability

WordPress OOPSpam Anti-Spam plugin is an anti-spam plugin designed for WordPress that protects forms and comments from spam through AI and machine learning techniques without the use of CAPTCHA validation. The WordPress OOPSpam Anti-Spam plugin suffers from an IP header forgery vulnerability that...

WordPress plugin OOPSpam Anti-Spam 安全漏洞

WordPress OOPSpam Anti-Spam plugin is an anti-spam plugin designed for WordPress that protects forms and comments from spam through AI and machine learning techniques without the use of CAPTCHA validation. The WordPress OOPSpam Anti-Spam plugin suffers from an IP header forgery vulnerability that...

CVE-2025-12094: Protection Mechanism Failure

The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments No CAPTCHA plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers such as CF-Connecting-IP, X-Forwarded-For,...

Google's Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month

Google on Thursday revealed that the scam defenses built into Android safeguard users around the world from more than 10 billion suspected malicious calls and messages every month. The tech giant also said it has blocked over 100 million suspicious numbers from using Rich Communication Services...

Over 100 Chrome extensions break WhatsApp’s anti-spam rules

Recent research by Socket’s Threat Research Team uncovered a massive, coordinated campaign flooding the Chrome Web Store with 131 spamware extensions. These add-ons hijack WhatsApp Web—the browser version of WhatsApp—to automate bulk messages and skirt anti-spam controls. Spamware is software tha...

131 Chrome Extensions Caught Hijacking WhatsApp Web for Massive Spam Campaign

Cybersecurity researchers have uncovered a coordinated campaign that leveraged 131 rebranded clones of a WhatsApp Web automation extension for Google Chrome to spam Brazilian users at scale. The 131 spamware extensions share the same codebase, design patterns, and infrastructure, according to...