Malicious code in bizarre-green-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3161d3289239e5409453e6e36c96c0a9e2daccd40d446afef167bb082f23bcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55096

Malicious code in crooked-red-flea npm...

EUVD-2025-55911

Malicious code in allied-copper-flea npm...

EUVD-2025-52066

Malicious code in sharp-violet-flea npm...

Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55231

Malicious code in conscious-crimson-flea npm...

EUVD-2025-52453

Malicious code in raspy-rose-flea npm...

MAL-2025-67418 Malicious code in conscious-crimson-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125ae740fa64abc7e8a08a5014faa7e87a94176ac6c23a4b1bb0d5be31fdbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious-crimson-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125ae740fa64abc7e8a08a5014faa7e87a94176ac6c23a4b1bb0d5be31fdbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53070

Malicious code in nearby-gold-flea npm...

EUVD-2025-53545

Malicious code in legislative-salmon-flea npm...

EUVD-2025-51154

Malicious code in vocational-salmon-flea npm...

MAL-2025-70196 Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55195

Malicious code in continuing-ivory-flea npm...

MAL-2025-70193 Malicious code in raspy-copper-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9001c87bb2695be3c1773363e623d9e6938f6972d21040f043e92da23276e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extensive_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f6e06b08976fd925e5baef8f3e67bef30f5606d72d94f5ebb25223e8dc4b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50494

Malicious code in continuedfleaz3n npm...

EUVD-2025-50764

Malicious code in abstractfleaz3n npm...

EUVD-2025-49752

Malicious code in nationalfleaz3n npm...

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection. This is done to "facilitate communications with command-and-control C&C infrastructure hosted on Microsoft cloud services," the Symantec Threat Hunter Team, part of...