Malicious code in rowrapee (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 398cfbdac2d3602a5c9836408942993c3f2bbcda911184825f01cf9937fb035e The package hides code to download and start malicious script containing malware, identified as adware. The triggering method seems to be PTH file, although it...

Malicious code in indah-gembus90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fbca16555c14bb4307cd51a4ebee87e37deeff0110e8a98076a8df0db262fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-teh48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3598603833fae54fbb54e5a6a8ad31169dd9659ab702fcab5165d4dde535608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94197 Malicious code in elderly_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3930a467356e1d252bd1a3dbda398c7f4b4d43e671c73989352cc365761ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56959 Malicious code in jaja-gorengan22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf54c880e65d28a086a30da0c052b92e34660eb6420d3b67ef984e7733205eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54309 Malicious code in putri-getuk85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86df80bc4d64faa17ae49eb74e0997f2b5b5416df62156c99619aa183e137bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Phishing Campaign Targeted Those Aiding Ukraine Refugees

Cyberattackers used a compromised Ukrainian military email address to phish EU government employees who’ve been involved in managing the logistics of refugees fleeing Ukraine, according to a new report. Ukraine has been at the center of an unprecedented wave of cyberattacks in recent weeks and...

Multiple personal firewall protection bypass

By using scripting and crossite scripting malware script can bypass protection against access to external sites and bypass sites restriction...