How Adversaries Exploit the Blind Spots in Your EASM Strategy

Internet-facing assets like domains, servers, or networked device endpoints are where attackers look first, probing their target’s infrastructure…...

EUVD-2025-117507

Malicious code in blind-purple-python npm...

Malicious code in blind-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5c16558a076087c67c07733dd5d026ae9d399fad0f129b20f1455d41212350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77435

Malicious code in blindsnail-strongdev npm...

EUVD-2025-77437

Malicious code in blindchicken-appteadev npm...

EUVD-2025-77436

Malicious code in blindchimpanzee-smiletea npm...

MAL-2025-100010 Malicious code in blind_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a9ea09fef6ecb5bbfee20c77bb0651f49d97f8b5d39ff584a0fac1d4bd04b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82635

Malicious code in blindelk0xrequest npm...

EUVD-2025-82634

Malicious code in blindplatypus0xrequest npm...

EUVD-2025-82636

Malicious code in blindcockroach0xrequest npm...

MAL-2025-100009 Malicious code in blind_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71660

Malicious code in blindjunglefowlz3n npm...

EUVD-2025-65157

Malicious code in blindsailfishz3n npm...

Malicious code in blind_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcab644ee6d4efe7faa653c3779f7e8d93ea18fef8ff817963cf7c2aa001192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55657

Malicious code in blind-red-mollusk npm...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66990 Malicious code in blind-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdcebce115bcc7fa8993bb4e2d2580589b2bc2cf42634c9c9219ae30fd70396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55658

Malicious code in blind-gold-wombat npm...

EUVD-2025-55656

Malicious code in blind-tomato-parrot npm...

Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...