MAL-2025-154978 Malicious code in fadila-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076a4559c0a445b708b569907290cb867b8a3a2ac776a6b4e98a9390dcd93bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169346 Malicious code in turisna-safsa-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81142a4472234be8537e36807857765ca4f8080c661d4c0663b64372db525274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163871 Malicious code in nuilava-dakaogfrae-nhha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c072016c093ad702cd52aadb1a98fa679b9b386bca4bb8a8c4072b8982063f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162438 Malicious code in nokire-arjuna27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17791f823433f014d0b6e543319a148e14bd5cf50686dd6e460b4032e8cb297e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170508 Malicious code in verify-technical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6eec2766ab6b56ea02aff183e67137cb626df3df8958bf17be93991b153af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159953 Malicious code in manttu-nuyati-mudiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879b7d45c4a6855ca215fc6561faaeb4b91deed7ea1f512d50af157e5954130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160749 Malicious code in muda-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d6f0809d9dc62a4cb67cfa8222cd42423d1ef71eef255e83ee6a74ec9bebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168115 Malicious code in tealove-boy10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b985f991d3df3b7c667c16139a6bbb5e6754ac734f1f63dd30309482ef1ca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155644 Malicious code in hafiz-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfde3e6216e9958ffeda4a51c0b2a21c3c6c3884ab56ba21bc481d40ae148cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153701 Malicious code in billa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbf273f38882e929ea4eedfec4ee150182b4d5014ab194247136d4956e25372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155961 Malicious code in ican-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e7411cf4a268df43848d18631f3ce1fe0b413e2c506a59507641ad39a44930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161109 Malicious code in mutaus-muiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e52174476e2caccacdb3c72613ffba8906080474269e8ded97b20894b8f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154932 Malicious code in fadila-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8aa37340bce8a265f9d630e2f9d6b5daf5bc34366bd3023de4a1e991ec8bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157992 Malicious code in layla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb89d187f152ad0d9a459760dcdbed24b0c0182e86b7e5065d69a7abdc89b7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161740 Malicious code in namada-kasito-minpori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255c585d7b9c89e418211f9c8058dce7e2a5a1e9072ebf7fcc9d7f0a08b645e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166756 Malicious code in teaadgg-musni-miuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663a5c0cb046af05325a3589817af87c1c7632d20bfdf5c82603ef1cae54d92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165335 Malicious code in sabua-muhay-nyaiauafamatua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfa041fa7af8333e418add2f62d99f4fd211ff5fd9a9e8d441a5d367240b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153221 Malicious code in avminah-fagmdas-diogrga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebde5b99462ad61b975a62d80ae9c14e7573a137d51818a3f89584e47488fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151924 Malicious code in aibona-moilpe-argo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc010c2bab246ceefc628561e227d21ecf399bfd72788936403af5ce59b63cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws

Amazon's threat intelligence team on Wednesday disclosed that it observed an advanced threat actor exploiting two then-zero-day security flaws in Cisco Identity Service Engine ISE and Citrix NetScaler ADC products as part of attacks designed to deliver custom malware. "This discovery highlights t...