MAL-2025-191157 Malicious code in cline-ai-main.cline-ai-agent (VSCode)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 04aeefbf39e1e9157280b91899a141e4f4c6619d434c594e4a2d3bf43883dbe6 This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...

Your passport, now on your iPhone. Helpful or risky?

Apple has launched Digital ID, a way for users in the US to create and present a government-issued ID in Apple Wallet using their passport information. For now, it works only for identity verification at Transportation Security Administration TSA checkpoints in more than 250 airports. Apple says...

Fake Chrome Extension "Safery" Steals Ethereum Wallet Seed Phrases Using Sui Blockchain

Cybersecurity researchers have uncovered a malicious Chrome extension that poses as a legitimate Ethereum wallet but harbors functionality to exfiltrate users' seed phrases. The name of the extension is "Safery: Ethereum Wallet," with the threat actor describing it as a "secure wallet for managin...

Malicious code in stout-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7879f8bd8e09b9b02107e004f3a501504b74e6c8942854202e516f9dc2c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dennis-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0aee09a906657945eb76a1fbe22e2063823f65be311f206d8c2affab6924e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80958

Malicious code in payne-wallet-store npm...

Malicious code in cruz-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bc90e6b185e2a83314f384271fe215242b3b3544ee48be64be7b7418add44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81349

Malicious code in lois-wallet-store npm...

EUVD-2025-82584

Malicious code in bryce-wallet-store npm...

Malicious code in gordon-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd44bb7b9a3c998518e4f26e60bc05213586d9ab2b79f8a211568cd8bb2f5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in howell-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f26e6d08034437211741e93677ad983a4da48e59160ce55d13e45f2fcceb885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80435

Malicious code in stewart-wallet-store npm...

Malicious code in weldon-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73677ddf41586ffdc5d1e16bb5bf28f6a9478fcc1c294c48799ae7ed349b0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bush-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a49a10a9e614afaf70f2bfd3d7782510aec4637b7bfb502f41bae3ac31459f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80703

Malicious code in richard-wallet-store npm...

EUVD-2025-82325

Malicious code in crosby-wallet-store npm...

Malicious code in paulette-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc87047953c28aa4d271d6a363c53af04bc202078572f8c9f440f6b72b77782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81437

Malicious code in kerry-wallet-store npm...

Malicious code in carpenter-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de1eef867a523bc2a18bf9c404d407218f894d0cd04ad930c8daea5d8a95f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b1842354897c841663c22e81cb3f7721868655d7ee59db9491c3f908de97b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...