Adios 2025, you won’t be missed

Welcome to this week's edition of the Threat Source newsletter. For us in America, we're in the holiday doldrums and things slow and/or shut down until the new year. At Cisco, we shut down the last week of the year to reset and recharge, and I've grown to be quite fond of it. I've worked plenty o...

Malicious code in extreme_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3865f4a706ea4985b6f386ff20406e9db0aa75306025959740e7839fec38462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131871 Malicious code in accepted_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa70cf8c14b417afc11d25f013d7cc8052689af6a821e01251e216fae7bdec94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99691

Malicious code in ytterbicjaguarz3n npm...

EUVD-2025-98852

Malicious code in fitjaguarz3n npm...

EUVD-2025-96441

Malicious code in misleadingjaguarz3n npm...

EUVD-2025-96159

Malicious code in notablejaguarz3n npm...

EUVD-2025-104669

Malicious code in hotjaguarz3n npm...

EUVD-2025-91304

Malicious code in heavyjaguarz3n npm...

EUVD-2025-91228

Malicious code in hungryjaguarz3n npm...

EUVD-2025-92453

Malicious code in diplomaticjaguarz3n npm...

EUVD-2025-74705

Malicious code in electoraljaguarlavender-16 npm...

EUVD-2025-74270

Malicious code in selectedjaguaraquamarine-81 npm...

EUVD-2025-75634

Malicious code in sillyjaguar-apptea npm...

EUVD-2025-75085

Malicious code in acceptedjaguar-appteadev npm...

EUVD-2025-77715

Malicious code in awakejaguarz3n npm...

EUVD-2025-79672

Malicious code in cautiousjaguarz3n npm...

EUVD-2025-78273

Malicious code in solidjaguarz3n npm...

EUVD-2025-81490

Malicious code in involvedjaguar0xrequest npm...

EUVD-2025-81036

Malicious code in oraljaguarreplicateautomation npm...