A Browser Extension Risk Guide After the ShadyPanda Campaign

In early December 2025, security researchers exposed a cybercrime campaign that had quietly hijacked popular Chrome and Edge browser extensions on a massive scale. A threat group dubbed ShadyPanda spent seven years playing the long game, publishing or acquiring harmless extensions, letting them r...

CeLLMate: Sandboxing Browser AI Agents

Browser-using agents BUAs are an emerging class of autonomous agents that interact with web browsers in human-like ways, including clicking, scrolling, filling forms, and navigating across pages. While these agents help automate repetitive online tasks, they are vulnerable to prompt injection...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next...

Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps

Cybersecurity researchers have discovered a new malicious extension on the Chrome Web Store that's capable of injecting a stealthy Solana transfer into a swap transaction and transferring the funds to an attacker-controlled cryptocurrency wallet. The extension, named Crypto Copilot, was first...

EUVD-2021-2115

Malware in sbrugna...

EUVD-2019-8576

Malware in sbrugna...

EUVD-2019-2054

Malware in sbrugna...

EUVD-2021-18732

Malware in sbrugna...

EUVD-2021-10045

Malware in sbrugna...

EUVD-2024-31382

Malicious code in bioql PyPI...

EUVD-2022-33234

Malicious code in bioql PyPI...

EUVD-2025-3667

Malicious code in bioql PyPI...

EUVD-2024-41456

Malicious code in bioql PyPI...

EUVD-2025-6010

Malicious code in bioql PyPI...

EUVD-2024-43409

Malicious code in bioql PyPI...

EUVD-2024-35001

Malicious code in bioql PyPI...

EUVD-2022-46010

Malicious code in bioql PyPI...

EUVD-2022-28987

Malicious code in bioql PyPI...

EUVD-2022-51944

Malicious code in bioql PyPI...

EUVD-2024-28180

Malicious code in bioql PyPI...