Mozilla Says It’s Finally Done With Two-Faced Onerep

In March 2024, Mozilla said it was winding down its collaboration with Onerep -- an identity protection service offered with the Firefox web browser that promises to remove users from hundreds of people-search sites -- after KrebsOnSecurity revealed Onerep's founder had created dozens of...

Viasat and the terrible, horrible, no good, very bad day

Welcome to this week's edition of the Threat Source newsletter. A year ago, fresh off a layoff, I never would have guessed I'd be spending Halloween weekend bouncing between conversations about space policy, satellite hacking, and wedding plans. That's exactly what happened when my space analyst...

EUVD-2025-177316

Malicious code in parse-rho-wind-compress-simple npm...

EUVD-2025-175550

Malicious code in wind-quick-char-yaml-thread npm...

Malicious code in quick-decode-transpile-array-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176508

Malicious code in scale-compress-minify-wind-interface npm...

EUVD-2025-178413

Malicious code in info-user-wind-book-sanitize npm...

EUVD-2025-178433

Malicious code in index-chi-grep-nu-wind npm...

EUVD-2025-179623

Malicious code in compile-gamma-wind-code-deserialize npm...

EUVD-2025-175553

Malicious code in wind-execute-authorize-mu-byte npm...

EUVD-2025-176832

Malicious code in quick-decode-transpile-array-wind npm...

EUVD-2025-179690

Malicious code in cluster-wind-fork-view-monitor npm...

Malicious code in root-resolve-wind-stub-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179592

Malicious code in container-bundle-wind-private-resolve npm...

EUVD-2025-175551

Malicious code in wind-psi-zeta-debug-zeta npm...

EUVD-2025-178050

Malicious code in load-wind-root-balance-file npm...

Malicious code in scale-compress-minify-wind-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cf00479e7cd2290e4a0ccc2c84047c9a059d424a668bd7c886f48e901c9c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wind-psi-zeta-debug-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb1fbb789018c346a5f6f4730f72aeec7f3a6b735977e2c9cd571c4d32b0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176594

Malicious code in root-resolve-wind-stub-interface npm...

MAL-2025-189367 Malicious code in scale-compress-minify-wind-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cf00479e7cd2290e4a0ccc2c84047c9a059d424a668bd7c886f48e901c9c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...