EUVD-2025-81657

Malicious code in huang-wallet-store npm...

EUVD-2025-81238

Malicious code in mervin-wallet-store npm...

EUVD-2025-80264

Malicious code in townsend-wallet-store npm...

EUVD-2025-80056

Malicious code in weldon-wallet-store npm...

MAL-2025-104897 Malicious code in kristine-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa886098ef65ec7e7c189f7b25c4bfabebc33a777b2a896e1b3879614ba8d129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101750 Malicious code in douglas-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e92ddd63a98aa66a8e8d34c9b5368935bff93993af4bae7f8a8b8e82398c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109122 Malicious code in stewart-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227d224abb57c190b2238e99bb2fe3326314fd9259b234016ad30bf8d9543a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99189 Malicious code in adkins-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b956861276b2bbd369c78582ae20415303aabc2bc166709ebbe1fdfbdc8476a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99487 Malicious code in anthony-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48177e2e1393eb290f935533abba3c48a6e81d12841790e609fc1d4041da6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress plugin Crypto 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An Access...

Social Engineering People’s Credit Card Details

Good Wall Street Journal article on criminal gangs that scam people out of their credit card information: Your highway toll payment is now past due, one text warns. You have U.S. Postal Service fees to pay, another threatens. You owe the New York City Department of Finance for unpaid traffic...

Supply Chain Attack

@metamask/sdk, @metamask/sdk-communication-layer, and @metamask/sdk-react are vulnerable to Supply Chain Attack. The vulnerability is due to a compromised debug package that injected malicious code, allowing attackers to intercept or tamper with dApp-to-wallet communications...

stealer

Stealer C stealer Chrome, Opera ,Chromium ,Edg...

Fake Nethereum NuGet Package Used Homoglyph Trick to Steal Crypto Wallet Keys

Cybersecurity researchers have uncovered a new supply chain attack targeting the NuGet package manager with malicious typosquats of Nethereum, a popular Ethereum .NET integration platform, to steal victims' cryptocurrency wallet keys. The package, Netherеum.All, has been found to harbor...

NK’s Famous Chollima Use BeaverTail and OtterCookie Malware in Job Scam

North Korea's Famous Chollima is back, merging BeaverTail and OtterCookie malware to target job seekers. Cisco Talos details the new threat. Keylogging, screen recording, and cryptocurrency wallet theft detected in an attack...

Video call app Huddle01 exposed 600K+ user logs

The Cybernews research team found that video call app Huddle01 exposed email addresses, real names, and other identifiers through an unprotected Kafka broker. Think of an unprotected Kafka broker like a post office that stores and delivers confidential mail. Now, imagine the manager leaves the...

A week in security (October 6 – October 12)

Last week on Malwarebytes Labs: Apple voices concerns over age-check law that could put user privacy at risk Your passwords don’t need so many fiddly characters, NIST says Millions of very private chats exposed by two AI companion apps Fake VPN and streaming app drops malware that drains your ban...

Don’t connect your wallet: Best Wallet cryptocurrency scam is making the rounds

Phishers and scammers can’t get enough of sending their feeble attempts to Malwarebytes’ employees. For which we can’t thank them enough because it means we can warn you, our readers. This time the scammers tried to impersonate Best Wallet—an app that lets people store, send, and receive...

Malicious Package

Overview @raydium-utils-v5/fetch-wallet-balance is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious code in @raydium-utils-v5/fetch-wallet-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6767cf6fa4bd28e8f2921afd36fd888dc17d2fa9fa759e4d279464c8cc45a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...