Malicious code in ssf-desktop-api-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5940c26ac6aa2f9c3682f4d383922757d2d5c361b5a70140ca289eabe304be8d The package ssf-desktop-api-browser was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192360 Malicious code in ssf-desktop-api-openfin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367b2689b7d50c48e26747ef1edce3a36165d64fd361ad3fc19f1c52fce204f9 The package ssf-desktop-api-openfin was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192350 Malicious code in express-my-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f2d01a1484943569d365369896d46ee7229516152d056b0403048a740e7bcc The package express-my-error-handler was found to contain malicious code. Source: ghsa-malware...

BEACON: A Unified Behavioral-Tactical Framework for Explainable Cybercrime Analysis with Large Language Models

Cybercrime increasingly exploits human cognitive biases in addition to technical vulnerabilities, yet most existing analytical frameworks focus primarily on operational aspects and overlook psychological manipulation. This paper proposes BEACON, a unified dual-dimension framework that integrates...

AgenticCyber: A GenAI-Powered Multi-Agent System for Multimodal Threat Detection and Adaptive Response in Cybersecurity

The increasing complexity of cyber threats in distributed environments demands advanced frameworks for real-time detection and response across multimodal data streams. This paper introduces AgenticCyber, a generative AI powered multi-agent system that orchestrates specialized agents to monitor...

Docker-Exploit-Mapper

DEM — Docker Exploit Mapper Welcome to DEM, a fully con...

Sift or Get off the PoC: Applying Information Retrieval to Vulnerability Research with SiftRank

Security research is fundamentally a problem of resource constraint and consequent prioritization. There is simply too much attack surface and too little time and energy to spend analyzing it all. The most effective security researchers are often those who are most skilled at intuitively deciding...

LLM Causality Analysis Framework

A comprehensive framework for multi-level causality analysis in Large Language Models LLMs, enabling systematic investigation of safety mechanisms and misbehavior detection across token, neuron, layer, and representation levels. Includes the whitepaper 2512.04841.pdf titled SoK: A Comprehensive...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

[SECURITY] Fedora 43 Update: nanovna-saver-0.7.3-8.fc43

A multiplatform tool to save Touchstone files from the NanoVNA, sweep frequency spans in segments to gain more than 101 data points, and generally display and analyze the resulting data...

ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications

AI agent-based systems are becoming increasingly integral to modern software architectures, enabling autonomous decision-making, dynamic task execution, and multimodal interactions through large language models LLMs. However, these systems introduce novel and evolving security challenges, includi...

PBFuzz: Agentic Directed Fuzzing for PoV Generation

Proof-of-Vulnerability PoV input generation is a critical task in software security and supports downstream applications such as path generation and validation. Generating a PoV input requires solving two sets of constraints: 1 reachability constraints for reaching vulnerable code locations, and ...

📄 Microsoft Windows 11 Search Path Privilege Escalation

Microsoft Windows 11 suffers from an untrusted search path local privilege escalation vulnerability. Proof of concept Metasploit module included. ============================================================================================================================================= | Title :...

MAL-2025-192281 Malicious code in elf-stats-frostbitten-pantry-235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af87e8804f9d49a6b71f2546c64657549faef299f6cf99e9dfc3bf7af21a905 The package elf-stats-frostbitten-pantry-235 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192278 Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-sleighing-mailbag-621 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bd43889e90656b7e076b57eae6373547a6c883fda60fd63069784433a41bab The package elf-stats-sleighing-mailbag-621 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-snowdusted-stockpile-595 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313c3813ac8880b0dc1f1a973c0125bf17d9f2c700ddc7a009cfc1efbdb54f4b The package elf-stats-snowdusted-stockpile-595 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192270 Malicious code in elf-stats-tinsel-candy-605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbef0d18c705f5e2d320ebbffd2ca291c82eeed7bb636c5a582d7388790185 The package elf-stats-tinsel-candy-605 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in unified11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da60b6c513002dadf0ea32c3293c0c1f0e73d8db20f85baf9b207fff1311569 The package unified11 was found to contain malicious code. Source: ghsa-malware 0234999818b5c6447b46c2551778c8daea15a41767afd1270af691c637d8ea9d Any...

MAL-2025-192246 Malicious code in remark-parse10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd5885ca66abe264124578aa99aaeb2907923a26681d5b64e8d6b72cb72696 The package remark-parse10 was found to contain malicious code. Source: ghsa-malware b0d37276c9efb7e85e07384bd19c0625e6672c70443710e145c260516f0ba2f4...