Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations

Enterprise 2025 introduces the first full cloud adversary emulation and expanded multi-platform testing, focusing on two advanced threat areas: Scattered Spider’s cloud-centric attacks and Mustang Panda’s long-term espionage operations...

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components RSC within hours of it becoming public knowledge. The vulnerability in question is CVE-2025-55182 CVSS score: 10.0, aka React2Shell, which allows unauthenticated remot...

Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permanent-sapphire-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117344

Malicious code in graceful-olive-panda npm...

EUVD-2025-117171

Malicious code in permanent-sapphire-panda npm...

Malicious code in exotic_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf8f99c5d4c766ec635214bf9f395641261baf82fc175c80c4039db6b2a0d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101034

Malicious code in beneficialpandaz3n npm...

EUVD-2025-103461

Malicious code in nosypandaz3n npm...

Malicious code in nosy_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4946531f11c0aa7c542dd05092f2ff149e9bce73fde1303154ad46e8f435255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae299749e9f4f2cbe1f515bf8ca6122d9c1da84105334c8fb3f6a31e6069457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98672

Malicious code in geneticpandaz3n npm...

EUVD-2025-100691

Malicious code in warmpandaz3n npm...

EUVD-2025-95760

Malicious code in presidentialpandaz3n npm...

EUVD-2025-96466

Malicious code in meaningfulpandaz3n npm...

EUVD-2025-93314

Malicious code in advancedpandaz3n npm...

EUVD-2025-93363

Malicious code in actualpandaz3n npm...

EUVD-2025-88722

Malicious code in socialpandaz3n npm...

EUVD-2025-92136

Malicious code in eventualpandaz3n npm...

EUVD-2025-89452

Malicious code in preparedpandaz3n npm...