MAL-2025-78565 Malicious code in guilty_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c30004ddf7297927c47722609cdee12ba32551292fa0472e55d9b5681ab241a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c30004ddf7297927c47722609cdee12ba32551292fa0472e55d9b5681ab241a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty-amethyst-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e80a382566fd08fdbf34794a38b2df4e77f1c6dcdfbbf00be40e64d74b02d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54029

Malicious code in guilty-amethyst-vicuna npm...

EUVD-2025-54027

Malicious code in guilty-beige-camel npm...

EUVD-2025-54026

Malicious code in guilty-scarlet-marsupial npm...

MAL-2025-68621 Malicious code in guilty-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82d6815420e7d8c3a0dcbf323fb4a7335b3f1e8ad24fe7b4e44876df129ed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54028

Malicious code in guilty-azure-boar npm...

Malicious code in guilty-scarlet-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df2487f398a89ad3fbb1916852ee40829597b96a89a2613daab3d90d877f12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60583 Malicious code in guilty_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805df9a63e523495145acdabdef8de072cfebb95920f799e19df1c237508d3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising

The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same time, defenders face growing blind spots — from spoofed messages to large-scale social engineering. This week’s findings show how that...

Ex-L3Harris Cyber Boss Pleads Guilty to Selling Trade Secrets to Russian Firm

Peter Williams, a former executive of Trenchant, L3Harris’ cyber division, has pleaded guilty to two counts of stealing trade secrets and selling them to an unnamed Russian software broker...

London Court Convicts Chinese Mastermind Behind £5bn Crypto Seizure

Zhimin Qian, the 'Bitcoin Queen,' pleads guilty in the UK after police seized over £5 billion in stolen crypto, the world's largest crypto seizure. Details on the Ponzi scam and fight for the funds...

Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

A 20-year-old member of the notorious cybercrime gang known as Scattered Spider has been sentenced to ten years in prison in the U.S. in connection with a series of major hacks and cryptocurrency thefts. Noah Michael Urban pleaded guilty to charges related to wire fraud and aggravated identity...

A Hacker May Have Deepfaked Trump’s Chief of Staff in a Phishing Campaign

Plus: An Iranian man pleads guilty to a Baltimore ransomware attack, Russia’s nuclear blueprints get leaked, a Texas sheriff uses license plate readers to track a woman who got an abortion, and more...

19-Year-Old Admits to PowerSchool Data Breach Extortion

A 19-year-old college student faces charges after pleading guilty to cyber extortion targeting PowerSchool, exposing data of 60…...

Man Jailed 24 Years for Running Dark Web CSAM Sites from Coffee Shop

Louis Donald Mendonsa, 62, was sentenced following a guilty plea for distributing child sexual abuse materials CSAM via…...

Teen Behind Hundreds of Swatting Attacks Pleads Guilty to Federal Charges

Alan Filion, believed to have operated under the handle “Torswats,” admitted to making more than 375 fake threats against schools, places of worship, and government buildings around the United States...

Two Russian Nationals Plead Guilty in LockBit Ransomware Attacks

Two Russian nationals have pleaded guilty in a U.S. court for their participation as affiliates in the LockBit ransomware scheme and helping facilitate ransomware attacks across the world. The defendants include Ruslan Magomedovich Astamirov, 21, of Chechen Republic, and Mikhail Vasiliev, 34, a...

ViLe Cybercrime Group Members Plead Guilty to Hacking DEA Portal

"ViLe" Hackers Busted! Two men plead guilty to breaching a federal law enforcement portal. Learn about the dangers of cybercrime, doxxing, and how authorities are working to combat these threats. This case highlights the importance of cybersecurity for law enforcement and the consequences for...