Malicious code in umi-sate45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb37a2fa779d90cbd2852831de2ed6a206255f72b21b490b9e5eda5e3432bcb0 The package umi-sate45-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50013 Malicious code in candra-rawon21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85368739de446c9abbddfb93d0ec2a35ebc3a6fd35ed6171f8db79c5e9f6d267 The package candra-rawon21-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50737 Malicious code in ade-buburayam4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a59d6ba536e6407f180381c7a66ef891c837131baa41a97c985d5279f9d8f3 The package ade-buburayam4-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50785 Malicious code in andi-bakso36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0d355ec256346bf5c50db6019785625c04eda2a27bfff8a40693d3f02ff4e The package andi-bakso36-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bayu-ikan18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0357ea4106cc453d870e71a1efee58107b24607a989a2be7acdb47acb3f9e5 The package bayu-ikan18-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in vida-sambel9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b81da59dfbf322794fbff80c4f2ba3bb2355b054a0ac24455b513cef6ddd337 The package vida-sambel9-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51288 Malicious code in cici-lengko18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4b28cedf83fec1f38cc7269a7a0e8860053ee519c8943c7cb564b56cb3551 The package cici-lengko18-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50742 Malicious code in ade-kue57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45e7c13dd9b661248f8d05c075da966248eb0263ebe8344669afd67cabdbcc2 The package ade-kue57-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362

Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software releases that are susceptible to CVE-2025-20333 and...

EUVD-2025-37700

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack. Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009 , where "CL" stands for cluster and "STA" refers to...

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack. Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009 , where "CL" stands for cluster and "STA" refers to...

EUVD-2025-37263

Malicious code in style-tailwind-variant npm...

Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview style-tailwind-variant is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-49270 Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

The AI-Designed Bioweapon Arms Race

Interesting article about the arms race between AI systems that invent/design new biological pathogens, and AI systems that detect them before they're created: The team started with a basic test: use AI tools to design variants of the toxin ricin, then test them against the software that is used ...

CVE-2025-10150 Webserver crash caused by scanning on TCP port 80

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques

Trend™ Research identified a sophisticated Agenda ransomware attack that deployed a Linux variant on Windows systems. This cross-platform execution can make detection challenging for enterprises...

📄 Transmission Torrent Parsing Integer Overflows

Torrent file parsing in Transmission suffers from multiple integer overflow vulnerabilities. I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtyp...