685 matches found
Malicious code in tool-webdriver-mocha-prettier-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0202e0c6d5116df45f3fbcb466f9f4469417db5a0a3a8c2d51725d491a76e674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in apollo-soap-publish-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a246f950561a73dbed23abd65495cd3417d16e1441c60334533a1dea3f3f67f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in maman-nasiuduk80-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480c3d6203b41970e896a936849a1a558efbecd6c725017f52ed907050d44a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in indah-kue41-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa59901dc7296717313dc65e8e3ec01c74090c83a14b401794f02b1d3a2fac8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mahesa-gembus51-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924d37224f942ca5e68699f4508a8326d2dca16541064d84e1816dbb7fc3e1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in artificial_fox_rose-36 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ead35ac063740db4eebd8115b36b350999a99a7969bea91c37e35784f07580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in amateur_silverfish_replicate_automation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be501ddfb42e2b065a0b522287e55165b562da3dcb9cd794659da0502a4f5b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-98534 Malicious code in yanti-keraktelor73-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df7486561d24c5a188a0a0aa383062321a42e4b7100dfd842dce283e059348e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zain-nasicampur56-tititugel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b4b785a6ecc7861a5b88e9f042e045c4bcb99aad698603e37a60bdc9d34272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sinta-kentang98-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da822c731f831efe63e366b8f0abeee12ae45ca7d19b1fb9591690acdf5f01f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-84258 Malicious code in contemporary_dingo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af75633e7a029478e66d7ba0e26498b4b3b6b9e5386160117bf440832946498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-80103 Malicious code in nadia-bubursumsum31-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96f527db22dc1dc98eca0d7bb5b9e33dfddf714596df9185765a713a744853e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nadia-jamblang56-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e287bc224eef61124374b38e3fc0749ecb64b3943e3255b86e1c65fe25f51fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in surya-gembus49-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eaab6235a871d04cff4af082f57cf5fd690e5c24f50630a968505feaf5a3d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe aka APT36, a...
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe aka APT36, a...
EUVD-2014-7527
Malware in sbrugna...
EUVD-2014-7593
Malware in sbrugna...