2137 matches found
MAL-2025-51836 Malicious code in fajar-rawon78-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e25a6dce22b06f8baab15f365ae2214f1a4f36927d3ebd519eb6db10a2bd95 The package fajar-rawon78-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
MAL-2025-50571 Malicious code in tuti-wajit19-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229e93086ab1cd3d3adf681d11c34d6ce2c12011829a613df015cb6559e636a5 The package tuti-wajit19-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-50559 Malicious code in tuti-lapis51-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4cce84765604c99f31bd124029bc00742c734401b4acdd6ac3655cc83e84aa The package tuti-lapis51-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-51451 Malicious code in citra-sate21-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b723e2364e6315848bfc11a42ffd097ed4b9ddfc659f552d810d540e27f573 The package citra-sate21-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in cindy-rujaksoto78-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d7e1818c07be1ed522346122a94159a36662b2f0f57c85ae816a8af288f88f The package cindy-rujaksoto78-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in dewanto-kentang14-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48974e6d7046508819dc6427e70a317eb1bdebc6b26061c7fea31ee7cdffe00 The package dewanto-kentang14-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in umi-gulai11-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fe64a6cd2cd5e4ef8853f415fad2c9cd3bf2b2569a48d8e0d9167fad9665eb The package umi-gulai11-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in wawan-bakwan71-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43d398b8cc007de9ab1263f63b0e23315cdcec3fdc0e0e195a818d1616d224a The package wawan-bakwan71-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
Malicious code in dewanto-peyek65-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e5aed9c0c79ceb6549d032b71c807947c2abbaf008fe9d46dad43d17adc056 The package dewanto-peyek65-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in budi-gembus10-remi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0471fc93b3ae45ba6ef2fc14a9d6757a3ab3be312cb1f5b46d39f900da5ec14 The package budi-gembus10-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in bambang-klanting64-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3fe40538f4f98f3465e5c4423a7a491fdcc418fd7c92d847e0694485a055ad The package bambang-klanting64-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in eko-ubi89-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a71f5f4cbbd4f1b8f44f3509bdf82172269abd65e5c36581d0321df511a98cb The package eko-ubi89-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...
MAL-2025-51163 Malicious code in budi-takokak34-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91943a4afc74a7ceeb900fca1a0a1783ceeff510053dbbcf86d8027aacb66bfe The package budi-takokak34-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-50593 Malicious code in umi-kue47-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21e7404a9935f4f8dd1624b560bdb9e99bdc2eda28ca116b7c6d69df103e347 The package umi-kue47-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...
Scam Ads Are Flooding Social Media. These Former Meta Staffers Have a Plan
Rob Leathern and Rob Goldman, who both worked at Meta, are launching a new nonprofit that aims to bring transparency to an increasingly opaque, scam-filled social media ecosystem...
Google's Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month
Google on Thursday revealed that the scam defenses built into Android safeguard users around the world from more than 10 billion suspected malicious calls and messages every month. The tech giant also said it has blocked over 100 million suspicious numbers from using Rich Communication Services...
Fake PayPal invoice from Geek Squad is a tech support scam
One of our employees received this suspicious email and showed it to me. Although it's a pretty straightforward attempt to lure targets into calling the scammers, it's worth writing up because it looks like it was sent out in bulk. Let's look at the red flags. Firstly, the sender address : PayPal...
A week in security (October 20 – October 26)
Last week on Malwarebytes Labs: Is AI moving faster than its safety net? Thousands of online stores at risk as SessionReaper attacks spread Apple may have to open its walled garden to outside app stores Meta boosts scam protection on WhatsApp and Messenger Home Depot Halloween phish gives users a...
Victim As a Service: Designing a System for Engaging with Interactive Scammers
Pig butchering, and similar interactive online scams, lower their victims' defenses by building trust over extended periods of conversation - sometimes weeks or months. They have become increasingly public losses at least $75B by one recent study. However, because of their long-term conversationa...