Malicious code in zain-kue72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6242a27dc812ec7887bde0006f9b01812e9c9ad7a96baa1ba86f7fc2dc0fb7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120730 Malicious code in indah-empal31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0336095475b4ca2a80bd199dc2c7a1a6a6610bc75957921fe4ad1292d6bc3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118683 Malicious code in amazing_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e1bec6113f65ffbc152413a1912a46b141e1e13d9196ad9219e724593bd1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119411 Malicious code in dewanto-lodeh67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8326b2f30995861749e7d0f3390aa653318a20bd9f062f89c406cb0087e257b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122666 Malicious code in putri-kolak54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a417c49e4081c3db52f725c85080fae0c6e99e086979b3b15db9f763060afd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jengkol9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070d58d893c0508c8e47a1afc3469716916abb03ee06f4bf56fb5ace6fa2bfbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfactory_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7959100b0f8185ef401f570e6fb1acc53570d0b53f65a79df7109fb86e1a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113839 Malicious code in fajar-bakwan63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5ebd5d6e763e8c2b4bc7ff22b7be9e0899b70c2dac60167c04d450863d6d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CISO's Expert Guide To AI Supply Chain Attacks

AI-enabled supply chain attacks jumped 156% last year. Discover why traditional defenses are failing and what CISOs must do now to protect their organizations. Download the full CISO’s expert guide to AI Supply chain attacks here. TL;DR AI-enabled supply chain attacks are exploding in scale and...

Cisco Finds Open-Weight AI Models Easy to Exploit in Long Chats

Cisco’s new research shows that open-weight AI models, while driving innovation, face serious security risks as multi-turn attacks, including conversational persistence, can bypass safeguards and expose data...

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

A flaw was found in Xen hypercall page handling within virtualized guest environments. The Xen hypercall page contains code generated by the hypervisor that lacks awareness of guest operating system CPU speculation mitigations, such as return instruction transforms, and Control-flow Integrity CFI...

linux-pam: Linux-pam directory Traversal

A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions...

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

A flaw was found in Xen hypercall page handling within virtualized guest environments. The Xen hypercall page contains code generated by the hypervisor that lacks awareness of guest operating system CPU speculation mitigations, such as return instruction transforms, and Control-flow Integrity CFI...

Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a9ec1ffb9852d245687b79f59cd345d6efac4ce6649a13046051ae64f81588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104545 Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101738 Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d444aa30576e535b709b2ce1fa2fe20e37ef02f8871cbe511dffaafce929f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-esdoger45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27affeb1c607a73debbcc69fa0cfd3a13b755065b950dde59492a29e895c4139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134fe37c81b78693c5e125fea902c63cb143d761a7bd4d9e3b07ee2315f0cce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...