Diagnose Before You Refine: Multi-Dimensional Judge Feedback for Query-Efficient Jailbreak Attacks

Automated jailbreak attacks rely on evaluation feedback to optimize adversarial prompts, but existing methods often lack fine-grained diagnostic information. We propose Jev-Guided Strategy Bandit JSB, a query-based jailbreak framework that leverages multi-dimensional probabilistic feedback to gui...

Malware in jsb-adapter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview jsb-adapter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in jsb-adapter (npm)

Source: amazon-inspector 368bba2e9d134a0d1ce565627644361ebe98bbf7bc2fd04812ff7137c300eaac package.json declares a dependency whose key jsb-adapter equals this package's own name and whose value is the bare HTTPS URL https://repo.securityctrl.com/jsb-adapter instead of a registry version range. On...

Malicious code in jsb-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368bba2e9d134a0d1ce565627644361ebe98bbf7bc2fd04812ff7137c300eaac package.json declares a dependency whose key jsb-adapter equals this package's own name and whose value is the bare HTTPS URL...

MAL-2026-15512 Malicious code in jsb-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368bba2e9d134a0d1ce565627644361ebe98bbf7bc2fd04812ff7137c300eaac package.json declares a dependency whose key jsb-adapter equals this package's own name and whose value is the bare HTTPS URL...

jsb-group.de Improper Access Control vulnerability OBB-3768386

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jinghuan-cli (>=1.0.20, <=1.0.41), jinghuanjs (>=1.0.73, <=1.0.93) potentially affected by unknown CVE via jinghuan-jsb (1.0.16)

jinghuan-jsb NPM version 1.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on jinghuan-jsb and may be impacted: - jinghuan-cli =1.0.20, =1.0.73, =1.0.93 Source cves: unknown CVE Source advisory: SNYK:JS-JINGHUANJSB-2962984...

Malicious Package

Overview jinghuan-jsb is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...