Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers

Cybersecurity researchers have flagged a new malware dubbed Speagle that hijacks the functionality and infrastructure of a legitimate program called Cobra DocGuard. "Speagle is designed to surreptitiously harvest sensitive information from infected computers and transmit it to a Cobra DocGuard...

EUVD-2025-117078

Malicious code in sparkling-scarlet-cobra npm...

Malicious code in ancient_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c9aee5c29ccb4e3860061b9ff30dd829a311b8ed804348d4f1c5bbf6e0d3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132008 Malicious code in ancient_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c9aee5c29ccb4e3860061b9ff30dd829a311b8ed804348d4f1c5bbf6e0d3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99317

Malicious code in electriccobraz3n npm...

EUVD-2025-100793

Malicious code in casualcobraz3n npm...

EUVD-2025-104475

Malicious code in internationalcobraz3n npm...

Malicious code in ethnic_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8ae2182f23278bcdd740a2032b5fbc9b77b73b25c0bb9580524ca684b98c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105453

Malicious code in ethniccobraz3n npm...

EUVD-2025-106357

Malicious code in biologicalcobraz3n npm...

EUVD-2025-104670

Malicious code in hotcobraz3n npm...

EUVD-2025-92676

Malicious code in conservationcobraz3n npm...

EUVD-2025-88844

Malicious code in silkycobraz3n npm...

EUVD-2025-74877

Malicious code in attractivecobraazure-98 npm...

Malicious code in fast_cobra-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23984a58c07756ca3b28e7375ac5af14a6db87bac4e31928c5889337ee8f9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75529

Malicious code in strangecobra-tool npm...

EUVD-2025-76088

Malicious code in outrageouscobra-appteadev npm...

EUVD-2025-75840

Malicious code in relativecobra-smiletea npm...

EUVD-2025-75792

Malicious code in rigidcobra-silentdev npm...

EUVD-2025-77475

Malicious code in violentcobraemerald-6 npm...