Reporting from Vegas: Networking, AI, and good boys

Welcome to this week's edition of the Threat Source newsletter. Howdy friends, and hello from Cisco Live U.S., here in sunny and very hot Las Vegas! An interesting quirk of being sent to one of these events is you learn to understand your limits as a person. Cisco Live is a three-day event, and i...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: nvdimm: Fixed scenarios where firmware activation led to deadlocks. Lockdep reports the following deadlock scenarios for CXL root devices: - power-management, deviceprepare, operations, and deviceshutdown operations for...

From Ransomware to Residency: Inside the Rise of the Digital Parasite

Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more dangerous shift happening quietly all around them? According to Picus Labs’ new Red Report 2026, which analyzed over 1.1 million malicious files and...

Malicious code in quiet_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c21bb6b4620573089017e0b7264ddda04a7cfb7c877d0c70d1df1727c32dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129673 Malicious code in quiet_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c21bb6b4620573089017e0b7264ddda04a7cfb7c877d0c70d1df1727c32dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116645 Malicious code in quiet_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a833ebc7e73a613bd8eae2a9119755189ce97df92766e4c44dc8ccedbd6304a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_deer-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d397db918c7c9262877eb0ce0bce8e8465071dd300ac841b38ef2739f195c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77533

Malicious code in quietmarlingray-99 npm...

EUVD-2025-62390

Malicious code in quiettermitez3n npm...

Malicious code in quiet_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158ef91b4278969b7c78df625b58aadebcf851ddf8a5c4cdeb2716835f6190be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62389

Malicious code in quietwoodpeckerz3n npm...

EUVD-2025-67367

Malicious code in quietbasiliskz3n npm...

MAL-2025-89887 Malicious code in quiet_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44a35845c0807a13ce3b3503cb53ddf09fb1014dbc9d6e6debd34bad05d9efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52508

Malicious code in quiet-maroon-narwhal npm...

EUVD-2025-52507

Malicious code in quiet-maroon-salamander npm...

EUVD-2025-52506

Malicious code in quiet-silver-goat npm...

EUVD-2025-52509

Malicious code in quiet-amethyst-swift npm...

Malicious code in quiet-silver-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e857e75436012cd93ae040b6b7d28b0519a8635530c9d5578b7be6cd23ea2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70143 Malicious code in quiet-silver-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e857e75436012cd93ae040b6b7d28b0519a8635530c9d5578b7be6cd23ea2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...