Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114504

Malicious code in despina-process-scripts-gemini npm...

EUVD-2025-113192

Malicious code in gemini-wolf-subscription-adonis npm...

EUVD-2025-115492

Malicious code in chakra-ui-gemini-astro-eslint npm...

EUVD-2025-123223

Malicious code in protractor-sass-loader-test-gemini npm...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

EUVD-2025-113208

Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar npm...

EUVD-2025-114296

Malicious code in duplex-jsonp-zenobia-gemini npm...

Malicious code in dotenv-safe-nconf-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121697

Malicious code in sqlite-gemini-procyon-cressida npm...

EUVD-2025-114411

Malicious code in dorado-uglify-js-gemini-chalk npm...

MAL-2025-141394 Malicious code in cypress-chakra-ui-umbriel-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7a0c50622f6f39f61b3b41a7ec2cba924eafff2db61daeb1da12326ecea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146433 Malicious code in postgres-gemini-acamar-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0277a04b53abf1394a107472a82edec4a8da37c1784fdd09e4fd7fa5017e6a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140018 Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142912 Malicious code in gemini-postcss-loader-typeorm-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26d098f2acbda848cd498a85e44bc66024352bd08b5b37b1056b8c449562648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly

Google on Wednesday said it discovered an unknown threat actor using an experimental Visual Basic Script VB Script malware dubbed PROMPTFLUX that interacts with its Gemini artificial intelligence AI model API to write its own source code for improved obfuscation and evasion. "PROMPTFLUX is writte...

CVE-2025-12156

The Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savepostdata function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with...

CVE-2025-12156

The Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savepostdata function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with...

CVE-2025-12156

CVE-2025-12156 affects the WordPress plugin “Ai Auto Tool Content Writing Assistant All in One” (versions 2.0.7–2.2.6). A missing capability check in save_post_data() allows authenticated users with Subscriber+ privileges to create/publish posts. Impact is data/ post creation without proper autho...

Chatbots Are Pushing Sanctioned Russian Propaganda

ChatGPT, Gemini, DeepSeek, and Grok are serving users propaganda from Russian-backed media when asked about the invasion of Ukraine, new research finds...