31 matches found
What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics
AI agents increasingly browse the web on users' behalf, yet they consume webpages as screenshots or text, exposing their LLMs to unvetted third-party content. Browsers enforce semantics under which what an element can do depends on what it is and where it comes from, not on what it says. Agents...
Malicious code in intact-amber-jellyfish (npm)
Source: amazon-inspector 0665b15f9b06df8b1a5bf72eb18d44df10b157a976c3f6e8151c4b0ce71295a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in intact-crimson-rodent (npm)
Source: amazon-inspector 593f864bd2be15f0c9fcb8d837cca08ad4ac1b253c8da109b8714dcb1f4e640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in intact-beige-jaguar (npm)
Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
PT-2026-2986
Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description A security issue exists in the /apis/dashboard.grafana.app/ API endpoints, allowing authenticated users to bypass dashboard and folder permissions. This affects all API versions v0alpha1,...
MAL-2025-120809 Malicious code in intact_lobster_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ab7591d2eb511dd9b9388b0246cc54fe0dd8be771089ec8b27632c47f5da24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-120810 Malicious code in intact_loon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421d1e1629132efb41a96d14620de5d2e9c8b5c4870ca24946ccd726966ef86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74527
Malicious code in intactmothlavender-90 npm...
EUVD-2025-74529
Malicious code in intactbadgermoccasin-3 npm...
EUVD-2025-76539
Malicious code in intactscorpion-silentdev npm...
Malicious code in intact_duck_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e384ec7af9cd03257ae7caa39c70038e2b2e812c91d608a8be753edf8c2071f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63496
Malicious code in intactdogz3n npm...
Malicious code in intact-amber-jellyfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665b15f9b06df8b1a5bf72eb18d44df10b157a976c3f6e8151c4b0ce71295a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53726
Malicious code in intact-amber-jellyfish npm...
EUVD-2025-53725
Malicious code in intact-beige-jaguar npm...
EUVD-2025-53724
Malicious code in intact-crimson-rodent npm...
MAL-2025-60694 Malicious code in intact_weasel_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6b69706845324f4c4dd8273dc01c9aa3c4ea20445091ef8e8cb97412709ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-47120
Malicious code in intactyakz3n npm...
Malicious code in intact_yak_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c05506b4cfe0d3eea9bd0d54b5f508aba10bf825981feb49c5f541b44499f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...