EUVD-2025-115154

Malicious code in commitlint-blaze-rollup-cross-env npm...

MAL-2025-141249 Malicious code in cross-env-betelgeuse-pm2-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a127b38dc2df9361abb4033f5f1d96762668df04c6aaaf121099671b7d19dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116543

Malicious code in aquarius-webdriver-mocha-hyperion-cross-env npm...

EUVD-2025-114860

Malicious code in cross-env-betelgeuse-pm2-mongoose npm...

EUVD-2025-114859

Malicious code in cross-env-csv-sedna-bunyan npm...

EUVD-2025-114837

Malicious code in cross-env-semantic-ui-dependencies-europa npm...

EUVD-2025-112649

Malicious code in hyperion-aldebaran-node-config-cross-env npm...

EUVD-2025-116823

Malicious code in aldebaran-grunt-cross-env-heka npm...

Malicious code in unuk-schema-cross-env-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a284a163b533011f80b6796a04ffc656782019c6c3bff8d63b9b8bf081c1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116072

Malicious code in blaze-release-it-cross-env-yakutsk npm...

EUVD-2025-111804

Malicious code in less-cross-env-enif-pm2 npm...

MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143900 Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

5 Types of Cybersecurity Assessment Tools Compared

Your organization’s assets are everywhere: on-premise servers, multi-cloud environments, remote endpoints, and countless applications. Trying to secure this sprawling digital footprint with siloed tools gives you a fragmented, incomplete picture of your risk. You might have one tool for cloud...

MAL-2025-46876 Malicious code in zephyr-electron-builder-cross-env-cressida (npm)

The package zephyr-electron-builder-cross-env-cressida was found to contain malicious code...

MAL-2025-33726 Malicious code in spectron-webdriver-cross-env-galaxy-parallax (npm)

The package spectron-webdriver-cross-env-galaxy-parallax was found to contain malicious code...

DoomArena: a Framework for Testing AI Agents against Evolving Security Threats

We present DoomArena, a security evaluation framework for AI agents. DoomArena is designed on three principles: 1 It is a plug-in framework and integrates easily into realistic agentic frameworks like BrowserGym for web agents and $τ$-bench for tool calling agents; 2 It is configurable and allows...

CVE-2018-9039: Missing Authorization

In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments...