EUVD-2025-98775

Malicious code in foreigndingoz3n npm...

EUVD-2025-91816

Malicious code in foreignmeerkatz3n npm...

EUVD-2025-91817

Malicious code in foreignleoponz3n npm...

EUVD-2025-74634

Malicious code in foreigncoralgold-54 npm...

Malicious code in foreign_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bddce8c0438fdbaaa419a5852cc7a8ade79646fecf011fd47f6381ca4051c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63986

Malicious code in foreigncamelz3n npm...

EUVD-2025-63985

Malicious code in foreigngrasshopperz3n npm...

MAL-2025-95872 Malicious code in peculiar_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d8ab6b9729255388e902ed2db4bd56d6b90ce37ff4938f98c9c62515064e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lapis22-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419a5ee8c5c9d209ff16cfe7281aadb2eb0eaa5d30532bb8db22036cfcc28ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54261

Malicious code in foreign-violet-whitefish npm...

Malicious code in foreign_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e0ad543627a59ef98b699f2fe3405d9c7066ec5e87292125330ef311578a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50171

Malicious code in foreignmammalz3n npm...

EUVD-2025-47597

Malicious code in foreignmandrillz3n npm...

Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions

A never-before-seen threat activity cluster codenamed UNKSmudgedSerpent has been attributed as behind a set of cyber attacks targeting academics and foreign policy experts between June and August 2025, coinciding with heightened geopolitical tensions between Iran and Israel. "UNKSmudgedSerpent...

[SECURITY] Fedora 42 Update: rust-tikv-jemalloc-sys-0.6.1-1.fc42

Rust FFI bindings to jemalloc...

Iran-Linked MuddyWater Targets 100+ Organizations in Global Espionage Campaign

The Iranian nation-state group known as MuddyWater has been attributed to a new campaign that has leveraged a compromised email account to distribute a backdoor called Phoenix to various organizations across the Middle East and North Africa MENA region, including over 100 government entities. The...

CVE-2025-10610

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.This issue affects Winsure: through Version dated 21.08.2025...

Scammers are still sending us their fake Robinhood security alerts

A short while ago, our friends at Malwaretips wrote about a text scam impersonating Robinhood, a popular US-based investment app that lets people trade stocks and cryptocurrencies. The scam warns users about supposed “suspicious activity” on their accounts. As if to demonstrate that this phishing...

CVE-2025-10610

CVE-2025-10610 corresponds to an SQL injection vulnerability in Winsure (SFS Winsure) caused by improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected: Winsure versions up to 21.08.2025. Public documentation consistently describes the flaw and its impa...

The Trump Administration’s Increased Use of Social Media Surveillance

This chilling paragraph is in a comprehensive Brookings report about the use of tech to deport people from the US: The administration has also adapted its methods of social media surveillance. Though agencies like the State Department have gathered millions of handles and monitored political...