MAL-2025-124548 Malicious code in yuni-esdoger48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1682051220704eb685b6ef58a3970ee168dbc31ed65916d2ea7a8ab7c571ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122719 Malicious code in putri-tapai1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1cf2310ee7e5dd07c18ac0df3f7ec8756d2ff0c8c1137658dec2869e69ab30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120712 Malicious code in immense_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b523e571df0f6838c9e527884b4eddc899479a58ca11172cc6c68c5e01d20a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122533 Malicious code in precise_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f220f2e8129ef5f09c1b7b1251dc1bee0eb6a2c65bf68f18a1a68b09f332e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repulsive_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c262ebdd12ae1dfd0881a784fc3dffa2a15fc408258609aec7b546cc0fba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks

Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. According to a report from CyberProof, both malware strains are written in .NET, target Brazilian users and banks, and...

CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122)

Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2025-91357

Malicious code in hanafi-keripik49-miaww npm...

Malicious code in kresna-peyek36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d4e712370f1d039131059026628e1010fdfa9e6c37e3ae7c96449515cf9871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mieayam82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7760ad8e5fcbae0e2b9a809b67a128f648e5c995aff57a75bc47936aff2934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91340

Malicious code in hanafi-otak-otak15-miaww npm...

EUVD-2025-88288

Malicious code in udin-nasicampur39-miaww npm...

Malicious code in dono-klanting79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217d7cfab938bfdbb588b69f7ce74c384ef7a6f918c8a0f0393a866ece1ee8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lapis10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f1cb73289c8db116a0da9122e55acacbe9c247a548ac696a0651fe432eadfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90819

Malicious code in joko-sasag54-miaww npm...

Malicious code in hadi-kue15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6884697d336c57e465170e26d7fa80ef812ad70ebdb3e5e8765a256ec925dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ragi63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8015bd4cae22df9a6718d4b7b2d92755b4c3206e6740a2da1d27798cf7e69658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90305

Malicious code in lutfi-bika3-miaww npm...

EUVD-2025-89980

Malicious code in nadia-gepuk75-miaww npm...

Malicious code in hadi-donat80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68180d6df92e3540833abd7cd40f410dbe2e9c2e50cc943c40f8d508f59a281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...