83 matches found
You Are the Trigger: Speaker-Activated Backdoors
Speech models are increasingly used as an interface to AI systems, from transcription tools to voice agents. Existing audio backdoors require an attacker to introduce triggers at inference time. We study a different threat model in which the attacker compromises the model during fine-tuning but h...
Malicious Package
Overview alleged-aqua-parakeet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-120029
Malicious code in busy-chocolate-parakeet npm...
EUVD-2025-117433
Malicious code in dry-chocolate-parakeet npm...
Malicious code in unchanged-tomato-parakeet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7c3df03d5d11071ece7f3d6a02d6d287db936e19a518d6b13433fcfd3df1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117016
Malicious code in unchanged-tomato-parakeet npm...
EUVD-2025-117134
Malicious code in rear-plum-parakeet npm...
MAL-2025-136147 Malicious code in organisational_parakeet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a2f87d4a2a122c54348c238d83e4d5d60aafaa4bc3d2150e0051d51c484035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102097
Malicious code in sportingparakeetz3n npm...
EUVD-2025-101864
Malicious code in thoughtfulparakeetz3n npm...
EUVD-2025-103335
Malicious code in officialparakeetz3n npm...
MAL-2025-130308 Malicious code in sporting_parakeet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827541371a44f272cfbe8e4b4ebf78d397389045079acea7326906760b71867a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-103450
Malicious code in numerousparakeetz3n npm...
Malicious code in chilly_parakeet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266b84c22dd3a7b12b0b17fe37f0ce0a8e419e5de88c512f52189bbf4ac61b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-94947
Malicious code in specialparakeetz3n npm...
EUVD-2025-106235
Malicious code in chillyparakeetz3n npm...
EUVD-2025-89180
Malicious code in retiredparakeetz3n npm...
EUVD-2025-91055
Malicious code in intensiveparakeetz3n npm...