MAL-2025-66946 Malicious code in beneficial-violet-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09045d37a8a389983f3c5dca68def225b6a14382e4d0f6c7ddbf373e2e176cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70939 Malicious code in sudden-violet-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732500f28025ebe20921c0f11b93514de44a88b227ac9c9e1efbbe891e6dcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67863 Malicious code in dramatic-violet-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e151ee70e9b3b8046b990adc8ed81183208175aed7ea2542793180232017b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68546 Malicious code in global-violet-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02a8a57e4e3dc1ca4348957c9f7b5a23b0144e10a83155b7ff7d0f43be27746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68192 Malicious code in extensive-violet-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e1154ae84195f308bf98af0e1083acbc077b517294a213bd03a881de7c96fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69987 Malicious code in present-violet-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338f3af0c389ae03c52dbf1620250bcd274fccb92b6669044c50071db340f146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

Malicious code in lilypad-violet-qoo759-project (npm)

The package lilypad-violet-qoo759-project was found to contain malicious code...

MAL-2025-45001 Malicious code in lilypad-violet-qoo759-project (npm)

The package lilypad-violet-qoo759-project was found to contain malicious code...

Malicious code in star-violet-rum512-project (npm)

The package star-violet-rum512-project was found to contain malicious code...

Malicious code in coral-violet-cjh501-project (npm)

The package coral-violet-cjh501-project was found to contain malicious code...

Malicious code in violet-yucca-lrr553-project (npm)

The package violet-yucca-lrr553-project was found to contain malicious code...

Malicious code in lightning-violet-bjr544-project (npm)

The package lightning-violet-bjr544-project was found to contain malicious code...

Malicious code in ecosystem-violet-xqw050-project (npm)

The package ecosystem-violet-xqw050-project was found to contain malicious code...

Malicious code in sunset-violet-yjd086-project (npm)

The package sunset-violet-yjd086-project was found to contain malicious code...

Malicious code in violet-quince-qgzw (npm)

The package violet-quince-qgzw was found to contain malicious code...

Malicious code in swan-violet-uzt995-project (npm)

The package swan-violet-uzt995-project was found to contain malicious code...

Malicious code in violet-coral-dkz995-project (npm)

The package violet-coral-dkz995-project was found to contain malicious code...

Malicious code in jade-violet-bfx267-project (npm)

The package jade-violet-bfx267-project was found to contain malicious code...