Malicious code in fitra-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1ae6d84e39ad8774a694bdceeb5c1ad3ca5b1034f342a6349e374f468c6c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155149 Malicious code in fitra-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95e71eac89bcf98b21f9b810893adc107960310f579738930967974dc3a2397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9f00e23232b5d81776d42b4028c3d0d511a83be3c0ab339a2664348875638e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12903 Payment Plugins Braintree For WooCommerce <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud

The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...

EUVD-2025-119984

The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...

MAL-2025-146124 Malicious code in perseus-webdriver-manager-norma-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cede82fc4266f2b965de537477b3e59d6b85b8a83c49ee724ad07025332c22d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress plugin Payment Plugins Braintree For WooCommerce 安全漏洞

WordPress Payments Braintree For WooCommerce plugin is a payment plugin designed specifically for WordPress websites, which supports payments done through both PayPal and credit cards. The WordPress Payments Braintree For WooCommerce plugin suffers from an authorization bypass vulnerability that...

Malicious code in indah-wajit23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f008afe639be46b800ded547d7da7769c022010e4733ed02bf1883b31010dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-miebogor95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ee63417122810e518e2c0a4b5f4d845c91d96d9f205e0510b7ee672cc5eb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51135 Malicious code in budi-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5442962472f1c076d27912ec25fb2bb65c6b2f746e04b5f4d92fa609039f7 The package budi-martabak61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks

Bad actors are increasingly training their sights on trucking and logistics companies with an aim to infect them with remote monitoring and management RMM software for financial gain and ultimately steal cargo freight. The threat cluster, believed to be active since at least June 2025 according t...

Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign

Microsoft on Thursday disclosed that it revoked more than 200 certificates used by a threat actor it tracks as Vanilla Tempest to fraudulently sign malicious binaries in ransomware attacks. The certificates were "used in fake Teams setup files to deliver the Oyster backdoor and ultimately deploy...

New Tech Support Scam Uses Microsoft Logo to Fake Browser Lock, Steal Data

The Cofense Phishing Defense Centre warns of a new tech support scam using Microsoft’s brand to lock browsers and steal data. Learn how the attack uses fake 'payment lures' and urgent security alerts to trick victims into calling a fraudulent support number...

EUVD-2021-14864

Malware in sbrugna...

EUVD-2019-13569

Malware in sbrugna...

EUVD-2022-38503

Malicious code in bioql PyPI...

Scam Facebook groups send malicious Android malware to seniors

An infostealer and banking Trojan rolled into one is making the rounds in Facebook groups aimed at "active seniors". Attackers used social engineering methods to lure targets into joining fake Facebook groups that appeared to promote travel and community activities—such as trips, dance classes, a...

New Android Trojan "Datzbro" Tricking Elderly with AI-Generated Facebook Travel Events

Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover DTO attacks and perform fraudulent transactions by preying on the elderly. Dutch mobile security company ThreatFabric said it discovered the campaign in August...