EUVD-2025-114859

Malicious code in cross-env-csv-sedna-bunyan npm...

EUVD-2025-116823

Malicious code in aldebaran-grunt-cross-env-heka npm...

EUVD-2025-111804

Malicious code in less-cross-env-enif-pm2 npm...

MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-schema-cross-env-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a284a163b533011f80b6796a04ffc656782019c6c3bff8d63b9b8bf081c1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143900 Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

5 Types of Cybersecurity Assessment Tools Compared

Your organization’s assets are everywhere: on-premise servers, multi-cloud environments, remote endpoints, and countless applications. Trying to secure this sprawling digital footprint with siloed tools gives you a fragmented, incomplete picture of your risk. You might have one tool for cloud...

MAL-2025-46876 Malicious code in zephyr-electron-builder-cross-env-cressida (npm)

The package zephyr-electron-builder-cross-env-cressida was found to contain malicious code...

MAL-2025-33726 Malicious code in spectron-webdriver-cross-env-galaxy-parallax (npm)

The package spectron-webdriver-cross-env-galaxy-parallax was found to contain malicious code...

DoomArena: a Framework for Testing AI Agents against Evolving Security Threats

We present DoomArena, a security evaluation framework for AI agents. DoomArena is designed on three principles: 1 It is a plug-in framework and integrates easily into realistic agentic frameworks like BrowserGym for web agents and $τ$-bench for tool calling agents; 2 It is configurable and allows...