EUVD-2025-38401

Malicious code in runtime-only-exploit npm...

MAL-2025-49430 Malicious code in runtimemoy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d105a6daee134b98d67022d827d5c5becf0b05d5e89c9c326115d79670be5 The package runtimemoy was found to contain malicious code...

Malicious code in @anhackle/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3377870b5585dd1a882aa7181cd653b554663bbaed7cfb956630d6a61e6e881 The package @anhackle/test was found to contain malicious code...

Soft Serve security vulnerability

Soft Serve is a self-hostable command-line Git server from Charm Open Source. A security vulnerability exists in Soft Serve versions prior to 0.10.0, which stems from not removing ANSI escape sequences and not cleaning up git messages, which could lead to a fake alert attack...

CVE-2025-64336

creationtimestamp| type| source ---|---|--- 2025-11-07 06:17:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zglip5lf2b 2025-11-07 07:10:46+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zjkgsnyaa2 2025-11-07 09:01:58+00:00| seen|...

PT-2025-48203

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2 Description Suricata is a network IDS, IPS and NSM engine. A heap overflow can occur when logging verdict information in eve.alert and eve.drop records for versions prior to...

CGA-3C3G-82QR-4X65

Bulletin has no description...

Why SOC Burnout Can Be Avoided: Practical Steps

Behind every alert is an analyst; tired eyes scanning dashboards, long nights spent on false positives, and the constant fear of missing something big. It's no surprise that many SOCs face burnout before they face their next breach. But this doesn't have to be the norm. The path out isn't through...

EUVD-2025-37866

Malicious code in react-notifications-alert npm...

MAL-2025-49361 Malicious code in react-notifications-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe66f8e85ad0ad7c2682e9640e0f2a48344bcef9beeaa8de12e5e687744acf The package react-notifications-alert was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-notifications-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe66f8e85ad0ad7c2682e9640e0f2a48344bcef9beeaa8de12e5e687744acf The package react-notifications-alert was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview react-notifications-alert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-37868

Malicious code in bcryptjs-node npm...

​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

CVE-2025-12184

creationtimestamp| type| source ---|---|--- 2025-11-04 15:36:04+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suf7ogxmj2 2025-11-04 16:21:37+00:00| seen| https://gist.github.com/Darkcrai86/d6a37014331756915af12b3fe18b7a9b 2025-11-04 17:52:18+00:00| seen|...

CVE-2025-20729

creationtimestamp| type| source ---|---|--- 2025-11-04 11:34:54+00:00| seen| https://gist.github.com/Darkcrai86/a2f8c588d5a0dbb6107299e795be1824...

CVE-2024-13998

creationtimestamp| type| source ---|---|--- 2025-11-04 01:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rgngpw6p2b...

On the Dangers of Poisoned LLMs in Security Automation

This paper investigates some of the risks introduced by "LLM poisoning," the intentional or unintentional introduction of malicious or biased data during model training. We demonstrate how a seemingly improved LLM, fine-tuned on a limited dataset, can introduce significant bias, to the extent tha...

MAL-2025-49347 Malicious code in lowerx-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c339fedf47fd9aff8ff17bb12b8d3014f38189be9b38d17606826127b03ff6ba The package lowerx-package was found to contain malicious code...