Application Security Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign A financially motivated threat actor automated the package publishing process in a coordinated tea.xyz token farming campaign. Ionut ArghireNovember 14, 2025
Malware & Threats Tens of Thousands of Malicious NPM Packages Distribute Self-Replicating Worm The spam campaign is likely orchestrated by an Indonesian threat actor, based on code comments and the packages’ random names. Ionut ArghireNovember 13, 2025