Malicious code in bayu-ikan18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0357ea4106cc453d870e71a1efee58107b24607a989a2be7acdb47acb3f9e5 The package bayu-ikan18-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in umi-sate45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb37a2fa779d90cbd2852831de2ed6a206255f72b21b490b9e5eda5e3432bcb0 The package umi-sate45-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dono-takokak50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77961aaf1311fcdd9f713bf0ff7ce6f46722808319408b907eb1656bd772c5b4 The package dono-takokak50-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dewanto-tahutek76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b84b9f73eb77850341b95925c97ea04821f82502f9872084f0ef3e1b5d0b75c The package dewanto-tahutek76-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in cici-miebogor56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8742b9ff34ebe894f83171dfae6ae18d0fa20b0a6db7b0b392115976817b81e3 The package cici-miebogor56-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-52447 Malicious code in tiara-tempe32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9a9a69fdab1566eccfc53f327b132c17a55741a1d41b38c124ca30483be0 The package tiara-tempe32-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50785 Malicious code in andi-bakso36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0d355ec256346bf5c50db6019785625c04eda2a27bfff8a40693d3f02ff4e The package andi-bakso36-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50216 Malicious code in dewi-kue98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0e6295281ec6b87bc50383474c9d131bc1965b7c66a3b5e75ec42d85407620 The package dewi-kue98-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50913 Malicious code in bambang-papeda9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ace52aa73c57f03253038f8042bf4eb23112e3a219f24574b720f6ff129765 The package bambang-papeda9-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50742 Malicious code in ade-kue57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45e7c13dd9b661248f8d05c075da966248eb0263ebe8344669afd67cabdbcc2 The package ade-kue57-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362

Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software releases that are susceptible to CVE-2025-20333 and...

EUVD-2025-37700

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack. Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009 , where "CL" stands for cluster and "STA" refers to...

EUVD-2025-37263

Malicious code in style-tailwind-variant npm...

Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49270 Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview style-tailwind-variant is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

The AI-Designed Bioweapon Arms Race

Interesting article about the arms race between AI systems that invent/design new biological pathogens, and AI systems that detect them before they're created: The team started with a basic test: use AI tools to design variants of the toxin ricin, then test them against the software that is used ...

CVE-2025-10150 Webserver crash caused by scanning on TCP port 80

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques

Trend™ Research identified a sophisticated Agenda ransomware attack that deployed a Linux variant on Windows systems. This cross-platform execution can make detection challenging for enterprises...