MAL-2025-124592 Malicious code in yuni-taiwan52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f463b34185c378f23c8c77064b447f3659adbd2f98b0acb8adeb4ee3733c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122775 Malicious code in qori-mieayam23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b281ad9c3a082502ac889e023e1975eab65fbf689bf0915262ae0b076c34753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123869 Malicious code in universal_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919848118ff146effa4d4e5bb6982a16aa63366a8291542584062770a87eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123076 Malicious code in rudi-sambel33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75aa8f7a809e07dd8fac0c55e477216858264c13a02f25400fa16dc0ffb6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks

Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. According to a report from CyberProof, both malware strains are written in .NET, target Brazilian users and banks, and...

CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122)

Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Malicious code in dono-klanting79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217d7cfab938bfdbb588b69f7ce74c384ef7a6f918c8a0f0393a866ece1ee8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-donat80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68180d6df92e3540833abd7cd40f410dbe2e9c2e50cc943c40f8d508f59a281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88288

Malicious code in udin-nasicampur39-miaww npm...

Malicious code in putri-ubi42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb4f878afc1406c658292399d75a47623a6234fab4a180ae1e2ec480ad1f140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getuk36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3b51444b958719835d640b59161f8a22811fca741be31273a3721a7b497c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90819

Malicious code in joko-sasag54-miaww npm...

EUVD-2025-89847

Malicious code in nina-ongol-ongol98-miaww npm...

Malicious code in gita-keripik38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87540c08e6f93745e58c838f953fee117516438c71270b69f41c568034d4a802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27db4035103a71af34680324dddcfb875dd4905fb68d96a465c969500985ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90305

Malicious code in lutfi-bika3-miaww npm...

Malicious code in dono-ragi63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8015bd4cae22df9a6718d4b7b2d92755b4c3206e6740a2da1d27798cf7e69658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kembang20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb8fcdb5e60a5c0233e8ff4f67974992daa98023c3d8d25163b6d7cbd26ba6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-otak-otak3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4335d2a5bd390f939b65e0ca3ba620eca95679febc59e02df4b78635b8f4fc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lepet22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dad346025ae7f9cfd34e2acb19d3c846a885a175b396972d48a7a4a48515a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...