MAL-2025-119137 Malicious code in cindy-mendoan3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da33ea9c1d935056b6c08066c792ca36e102fbd6cefce125ce694706a633bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122346 Malicious code in okta-tiwul33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fefa6c07a08aa19dd8a92b51d365e67f78f96e4eb98d315f34f92f4fd3f0110f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123119 Malicious code in sari-mie91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9ca131b1a4bc869256c325eb5da0f47ac3aed95ca6fadba322f10c11483f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca9752cabc126d4ed76f7e9ce63cc3406d62b58a60e7626256249d51b07c991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks

Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. According to a report from CyberProof, both malware strains are written in .NET, target Brazilian users and banks, and...

CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122)

Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2025-91340

Malicious code in hanafi-otak-otak15-miaww npm...

Malicious code in erick-ikan44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b2c79613324063f5094e8861dac0df3437395b930819043fb7f56eb6cf57f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jus99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73a245031f8967049bb4e11827437c060392b2a60c4f8b286c7e0e347de8443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-martabak15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba59048a079a412db9b1c7dd3a6e651cf48ace8076aa9283032a29e32cff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lepet22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dad346025ae7f9cfd34e2acb19d3c846a885a175b396972d48a7a4a48515a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465687e4bcf2333ab7b04365cde317e7ce3b8f81ca39bfe6dd282b3bf526d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-otak-otak3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4335d2a5bd390f939b65e0ca3ba620eca95679febc59e02df4b78635b8f4fc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc9e64f9a78d00db153cac6d011873b32a92d243fede41b15724d519f6a08f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4761ab8d6c68c11764980faf6d162db1f2beffe0f1349db9d764a0ed12e4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bakwan2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd1d6679419f1518e3186bed9842dbebbec750320f2419c5cc8326ff5413074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33215a645d6869119267c5f8139cce98b2a94065ba4fc0ba74be68781e4e45a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sate88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7313d93520ad3734dff7d80593bbd1b15743c25e5bbe8566cb56c140923e291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe538ccc32e33679dc598b4854f6fced59f032a430779331a06af9bd651b0e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kembang95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8901e8baf92d7ab46738e3529b10b3c308e7d2b027598bf5d40dc2994162a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...