EUVD-2025-84102

Malicious code in suspiciousbandicootz3n npm...

EUVD-2025-84100

Malicious code in suspicioushoverflyz3n npm...

Malicious code in candra-nasipecel100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593717175e71fffd676e52932bb9ab9134afb65242d371e6d3c2c2c722f0ccb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73387

Malicious code in suspiciouselkrequirement npm...

MAL-2025-96905 Malicious code in suspicious_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec32ca7eff11694cea73637969d9bf1fefb676936ee0fd6675edb7b01acd28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66360

Malicious code in suspiciousdragonflyz3n npm...

Malicious code in suspicious_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213106836be1ce85c4c4520d6f9d2ab51d5924246210972b504064e855e62ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51645

Malicious code in suspicious-amethyst-eagle npm...

EUVD-2025-51643

Malicious code in suspicious-beige-crawdad npm...

EUVD-2025-51644

Malicious code in suspicious-beige-albatross npm...

EUVD-2025-51640

Malicious code in suspicious-turquoise-puffin npm...

EUVD-2025-51641

Malicious code in suspicious-scarlet-bonobo npm...

EUVD-2025-51642

Malicious code in suspicious-lime-camel npm...

Malicious code in dowload_ebok_spia_nella_rete_by_riccardo_meggiato_h35d1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22257eee2fe8fd45715137c60e323af36d2ec73059759faee8b9881bc8bffff The package dowloadebokspianellaretebyriccardomeggiatoh35d1 was found to contain malicious code...

MAL-2025-48681 Malicious code in feature-reporter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005ae57fd871f8d3448911152254fcedcae9af32d34e04f01bb020307c5df831 Any computer that has this package installed or running should be considered...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0...

MAL-2025-48750 Malicious code in paysafe-client-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca3abf57e822e819e2d6ce06757f3a061020e9f84cde317ba1382e03d945884 Any computer that has this package installed or running should be considered...

MAL-2025-48690 Malicious code in hyatt-avatar (npm)

Package collects system info and sends to untrusted server, plus suspicious install scripts indicate malicious behavior. The package communicates with a domain associated with malicious activity...

Canada Fines Cybercrime Friendly Cryptomus $176M

Financial regulators in Canada this week levied $176 million in fines against Cryptomus , a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti money-laundering laws come ten months...

What to do when you click on a suspicious link

October is Cybersecurity Awareness Month, and as the tech-savvy friend or family member, people probably come to you for advice. One of the most common questions is: "I clicked a suspicious link. What do I do now?" Don't worry -- panic won't help, but a calm, step-by-step response will. Share thi...