MAL-2025-51180 Malicious code in candra-gaplek68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4e41cf362f4a38b7efc82f8f2b108279d406579a4af74ab9a4bec6c11538a5 The package candra-gaplek68-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50037 Malicious code in cici-donat48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414958021e652b65170a56a98885129eb651c0574a5fa47a97a8c44da55eb6fd The package cici-donat48-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50125 Malicious code in citra-donat9-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b65336a8948976890fa6a21f27e9fcddfb440670b84df014b15ea09f1529d The package citra-donat9-crottsekebon was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52717 Malicious code in wibowo-gaplek73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c253a714992bfca43f50ba704b3236b934a8e99e0d453434e49217bc454cff The package wibowo-gaplek73-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eka-sego66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2704e4140e2bc3bc73eb2a8831d0965c2389db44cffe7210d55ec7ef80aa9476 The package eka-sego66-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in umi-gandul97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79dc416c2795b4f90e94b2c8077e1d818947a42bcf9cc888ddc17d6560835572 The package umi-gandul97-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dewanto-jus58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5071e4b31c8b04a8a53989fb61f9b899d731fbd7d1cfe688ff75c01cb7e1e8 The package dewanto-jus58-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-kue58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9acb4784a98f767ecc0712e298f2c6153946473456eaad5e074a3dbbc80177a The package budi-kue58-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in ade-tapai45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e867082e8cc83c0a986d0f3dbc64a31aa0ab8846596a627d9b26171757a1b6a3 The package ade-tapai45-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in ade-sate80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23ff0c1b2895f09c59b585682c351e6ad679acaad430681119a3741844e68e The package ade-sate80-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eka-soto72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b197dd6dd5c055e11ced4931bc4e9e97f1b6b7eb1dcc0cf101bceac5bef5aad The package eka-soto72-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-52417 Malicious code in tania-tumis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1333b5f324c56a5d2841d22d282a4d7d7ee09987fedc667bfc4c2a03a99d96d The package tania-tumis49-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

LLM Response Evaluation with Spring AI: Building LLM-as-a-Judge Using Recursive Advisors

The challenge of evaluating Large Language Model LLM outputs is critical for notoriously non-deterministic AI applications, especially as they move into production. Traditional metrics like ROUGE and BLEU fall short when assessing the nuanced, contextual responses that modern LLMs produce. Human...

Automated and Explainable Denial of Service Analysis for AI-Driven Intrusion Detection Systems

With the increasing frequency and sophistication of Distributed Denial of Service DDoS attacks, it has become critical to develop more efficient and interpretable detection methods. Traditional detection systems often struggle with scalability and transparency, hindering real-time response and...

The 5-Step Exposure Remediation Automation Process

Security teams are often buried under a mountain of vulnerability alerts. The daily reality is a constant scramble to patch the most critical issues, leaving a massive backlog of lower-priority—but still dangerous—exposures. This reactive cycle is exhausting and unsustainable. It’s like trying to...

​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

The 5 generative AI security threats you need to know about detailed in new e-book

Generative AI is reshaping the way security teams operate—accelerating threat detection, automating workflows, and enabling scale. But as defenders embrace AI to strengthen their posture, cyberattackers are doing the same to evolve faster than traditional defenses can adapt. Microsoft’s 2025...

APThreatHunter: An Automated Planning-Based Threat Hunting Framework

Cyber attacks threaten economic interests, critical infrastructure, and public health and safety. To counter this, entities adopt cyber threat hunting, a proactive approach that involves formulating hypotheses and searching for attack patterns within organisational networks. Automating cyber thre...

appsec-sentinel

AppSec-Sentinel AI-powered security scanner with cross-file...

A Practical Guide to Attack Surface Intelligence Mapping

Think of your organization’s digital presence as a sprawling, ever-expanding city. New buildings servers go up, old ones are forgotten, and unofficial shortcuts shadow IT appear overnight. Trying to defend this city without a current map is impossible. You’re left reacting to alarms instead of...