MAL-2025-186063 Malicious code in centaurus-miranda-meteor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9dfde358d6a071c63d8cd5d8c57a54d7e60b2c7c26ccf05411518e4daeeb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425d62c2fe93005aba711c27f189388e923663ac5612acf61c08578432e08530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162134 Malicious code in nokire-abimanyu22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032337113d550b869ee3ef9faef1afdb91b9bcc8f9fbc66a2403bac8e9ff21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-yakutsk-celeste-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90591d766829f3a790ea4d9c1652e0505ea1c2f38420ac201bf0912f328d2cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nodejs-bellatrix-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51c5af9497d648c837690d26c1883cd6827d6a576e08da0c2774ab1f1c3bf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115907

Malicious code in build-webdriver-mocha-ganymede-luna npm...

Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119043 Malicious code in candra-semur73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf70aeba29b7a5b9e1a4d16296fb0178e11f8cb0538456d5aa08a3091fc762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118420 Malicious code in zaki-gandul80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a495bd90ab81249e77a80941ea431171b89610405a10fed77bf916ec2dcdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1b17f0089f09b2b0e23dd44e5c2103c52dbddc2d346186e9e3dc3da7194e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271f2bd18c22367ebb4d8e0d6830ec4a1463e1a5a91e8abfc85b68f9d09a980f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4b4520a0e39849c99ba4064b891cc90dc8121ce16c0fab2cfae85840360bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c27d14ed65f0a239aae425b76e6cf59dca80344862644b3ea46c984755585fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tempe33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78d4e755c9c0a7efdce38edb06dde36a38dacbc5b906cd4b286a2993c120c05 The package candra-tempe33-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

How to Automate Cyber Risk Remediation: A Playbook

Trying to manage modern cyber risk with manual processes is like trying to empty the ocean with a bucket. Your team works hard, but the sheer volume of vulnerabilities makes it feel like you’re barely making a dent. You close one ticket, and ten more appear. This approach is unsustainable and...

FreeBSD : Firefox -- Mitigation bypass (a4bebda9-b808-11f0-8016-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a4bebda9-b808-11f0-8016-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1978453 reports: Mitigation bypass in the Web Compatibility...

Astra Linux – Vulnerability in Firefox

Mitigation bypass in Web Compatibility: Tooling component. This vulnerability has been fixed in Firefox 143 and Thunderbird 143...

[SECURITY] Fedora 42 Update: qt6-qtgrpc-6.9.3-1.fc42

Protocol Buffers Protobuf is a cross-platform data format used to serialize structured data. gRPC provides a remote procedure call framework based on Protobuf. Qt provides tooling and classes to use these technologies...

Mysterious Elephant: a growing threat

Introduction Mysterious Elephant is a highly active advanced persistent threat APT group that we at Kaspersky GReAT discovered in 2023. It has been consistently evolving and adapting its tactics, techniques, and procedures TTPs to stay under the radar. With a primary focus on targeting government...

Autonomous AI Hacking and the Future of Cybersecurity

AI agents are now hacking computers. They're getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber operation, and hack autonomously, at computer speeds and scale. This is going to change everything. Over the summer,...