MAL-2025-51856 Malicious code in fauzi-kolak87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7a4a24eb232ab065bf4e92b578bd8888aa444bf1c41de6e7dbed65f098952a The package fauzi-kolak87-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50887 Malicious code in bambang-jus39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae25e5a9258fd0c80bed5883f3bbba3f6747826bb7c46b3a85130827526458 The package bambang-jus39-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50899 Malicious code in bambang-lutis45-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cf74867cb97990fe7f762f7b44165463fc11329d0daf586e14a586db6d999b The package bambang-lutis45-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50151 Malicious code in citra-mieaceh100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d5ebf0e85548e8ad436cd2b5f2dc1b8163fc179ab5d604b33111517f63fa29 The package citra-mieaceh100-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51288 Malicious code in cici-lengko18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4b28cedf83fec1f38cc7269a7a0e8860053ee519c8943c7cb564b56cb3551 The package cici-lengko18-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50216 Malicious code in dewi-kue98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0e6295281ec6b87bc50383474c9d131bc1965b7c66a3b5e75ec42d85407620 The package dewi-kue98-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-52568 Malicious code in umi-teh45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835358879f133d1fc39bc31aedbaecd3ca1203a50b998da89bbea9045097e750 The package umi-teh45-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm...

MAL-2025-50742 Malicious code in ade-kue57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45e7c13dd9b661248f8d05c075da966248eb0263ebe8344669afd67cabdbcc2 The package ade-kue57-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362

Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software releases that are susceptible to CVE-2025-20333 and...

EUVD-2025-37700

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack. Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009 , where "CL" stands for cluster and "STA" refers to...

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack. Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009 , where "CL" stands for cluster and "STA" refers to...

EUVD-2025-37263

Malicious code in style-tailwind-variant npm...

Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview style-tailwind-variant is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-49270 Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

The AI-Designed Bioweapon Arms Race

Interesting article about the arms race between AI systems that invent/design new biological pathogens, and AI systems that detect them before they're created: The team started with a basic test: use AI tools to design variants of the toxin ricin, then test them against the software that is used ...

CVE-2025-10150 Webserver crash caused by scanning on TCP port 80

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques

Trend™ Research identified a sophisticated Agenda ransomware attack that deployed a Linux variant on Windows systems. This cross-platform execution can make detection challenging for enterprises...

📄 Transmission Torrent Parsing Integer Overflows

Torrent file parsing in Transmission suffers from multiple integer overflow vulnerabilities. I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtyp...