MAL-2025-61242 Malicious code in scientific_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c2fb2be8421d3a2efe974c826275e0bebc6ba12585bcf6b4b34a7d09c844f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rawon7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beda998d3c80a7463c05c091a2bc2d9697cf5a5f9e229687f6e755098b24b233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-sasag60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cfe78e65c3d0bb3b3ee1572dd610053a0a2c151fbc1260227d2e026de5e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57589 Malicious code in maya-peyek24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3e62dba89557f1f12f6b7d770b11a363d9c04132bc9f8f3478f3475fbf3929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59716 Malicious code in yuni-liwet34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98e93a1f787a03f2dbc98b4cb22175919567c537210238e2afe4753ab819f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58383 Malicious code in riana-gembus66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7a1af8b03d6f8b902aace40b543963bd64d269bf8dd3256059333678bdc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55211 Malicious code in andi-tumis33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef469c1914b445a02d05ce933efd96f062a16bf9b52f9a93dfd98ad277f0939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54752 Malicious code in rudi-lontong87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0805bedf2fb70e1ea8cc536ff5162c1cd022b32bb2380ecfc51ac004bac27737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53089 Malicious code in kiki-kue4-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409f70cd7ee038155945ea4fbbdc7a483733de2c02424831f660e1db4087543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51986 Malicious code in gita-lapis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72dd608bc88cf762e6648776ba45ad89d2c3be82a38ef2f5ceb5559e74536388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-empal30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6464a4917db4e9bcd559b0cb0ddde49f6cac50737dfad98eb57946747dd90a2 The package galih-empal30-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50147 Malicious code in citra-lodeh15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb41fd3ee5cc4b0067d1a1ad9204a524daf98d1cf34c7f9efd7f88d2b0fa6cbf The package citra-lodeh15-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 141 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 141.0.7390.54 Linux 141.0.7390.54/55 Windows and Mac contains a number of fixes and improvements -- a list of changes is...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to 122.0.6045.214 Platform version: 15753.38.0 for most ChromeOS devices and will be rolled out over the coming days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a bu...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 15699.58.0 Browser version: 121.0.6167.159 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

Stable Channel Update for ChromeOS / ChromeOS Flex

Hello All, The Stable channel is being updated to 120.0.6099.203 Platform version: 15662.64.0 for most ChromeOS devices and will be rolled out over the next few days. If you find new issues, please let us know one of the following ways: File a bug Visit our Chrome OS communities General: Chromebo...

Stable Channel Update for ChromeOS / ChromeOS Flex

ChromeOS M115 Stable The Stable channel is being updated to OS version: 15474.61.0 Browser version: 115.0.5790.131 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community ...

US dangles $10 million reward for information about Cl0p ransomware gang

The US Department of States national security rewards program, Rewards for Justice RFJ, is offering a reward of up to $10 million for information linking the Cl0p ransomware gang, or any other malicious cyber actors targeting US critical infrastructure, to a foreign government. Advisory from...

Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information

Australia's largest telecommunications company Telstra disclosed that it was the victim of a data breach through a third-party, nearly two weeks after Optus reported a breach of its own. "There has been no breach of Telstra's systems," Narelle Devine, the company's chief information security...

Google Launches New Open Source Bug Bounty to Tackle Supply Chain Attacks

Google on Monday introduced a new bug bounty program for its open source projects, offering payouts anywhere from $100 to $31,337 a reference to eleet or leet to secure the ecosystem from supply chain attacks. Called the Open Source Software Vulnerability Rewards Program OSS VRP, the offering is...