Malicious Package

Overview terminal-prettier is a malicious package. This package contains malicious code, and its content was not yet removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-162605 Malicious code in nokire-kilua19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8a0fce4fbe34cfcc1731c9fb6e6f9deafb6dd3be6be77c2c36566c5cfbf9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168591 Malicious code in tealove-okta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48364c10d62651ddd0544fdee3a398823ba87504d3041a85cd1eb09d14671b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-keraktelor9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306b1ebd37eaf2695312afb672ddc0ef6590159482d42e856625e6e1956f9223 The package tiara-keraktelor9-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads

Cybersecurity researchers have warned about a large-scale ad fraud campaign that has leveraged hundreds of malicious apps published on the Google Play Store to serve full-screen ads and conduct phishing attacks. "The apps display out-of-context ads and even try to persuade victims to give away...

Malware Can Bypass Chrome Extension Security Feature Easily

Researchers have uncovered a new social engineering trick that leads users to a malicious extension from Google Chrome impersonating to deliver Adobe’s Flash Player in order to lure victims in a click fraud campaign. Security experts at TrendMicro believe that the malware is triggered by opening...

Luuuk Bank Fraud Campaign Nets €500K in One Week

A fraud campaign siphoned more than half a million dollars from a European bank over the course of a week earlier this year, researchers with Kaspersky Lab announced this week. The campaign, dubbed Luuuk, extracted €500,000 roughly $679,700 USD from 190 victims, mostly in Italy and Turkey, from...

Adobe Photo Loader Malware Posts Craigslist Spam

An attacker is going to a lot of trouble to post spam messages to Craigslist. Researchers at Solera Networks have come across an attack where malware is using compromised machines to post poorly worded ads for an Android application marketed at parents for the purposes of monitoring the activitie...