Malicious code in eka-mendut52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120f2868084a1b4c1567d1c6b82f8c850899899ed04fb017715bad4820ee7765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-buburayam73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d1c92c4f0515bdc347f8178ced7dfc82c2498e2ca49ae411a68c0d084acf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65942 Malicious code in vida-gandul31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeac29dc2ff5989173f5b893303d42793df4b0243c2bd102311d5d69c9b6fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65840 Malicious code in utomo-mendut79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb51b0cf72ddaeea7bd9d6288e78eab95f25f94081996d0e8d80f33645093cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f54c2c4cd3a472fe4f5297b3dae821abb414e5a7b5e7a9d8d3741dd82f3d2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60672 Malicious code in industrial_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9ab809113a7967b846d5579aaf2d600d9cabdb36c33ef03d09d485969fb098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23db19242f8201f7ce62a8734881d9a72f3853a72f7630e0b582549aa72dd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-semur82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153ffe6b1ce2c051be9eab7fca04d1e698efdc601eaae4a3308dec2a7b45fd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56164 Malicious code in excessive_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceef8cacaf1c4a664436902ade4f5eca0146dbcd66c45ea019cf244526a72082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53646 Malicious code in indah-bakwan61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f381ea58a8636ff4b8d3d2f879308fa4f81a9773c61978b33de5448aa6ea9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-source information stealer malware called HackBrowserData and exfiltrate sensitive information in some cases by using Slack as command-and-control C2...

Cisco Context Service SDK Arbitrary Code Execution Vulnerability

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit SDK could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. The vulnerability is due to insufficient...