MAL-2025-7057 Malicious code in @amber-team/figma-utils (npm)

The package @amber-team/figma-utils was found to contain malicious code...

MAL-2025-7954 Malicious code in @frozen-team-qa/oti-service (npm)

The package @frozen-team-qa/oti-service was found to contain malicious code...

MAL-2025-7947 Malicious code in @frozen-team-qa/auth-service (npm)

The package @frozen-team-qa/auth-service was found to contain malicious code...

MAL-2025-7056 Malicious code in @amber-team/export-events-to-sheet (npm)

The package @amber-team/export-events-to-sheet was found to contain malicious code...

MAL-2025-7048 Malicious code in @amber-team/amazon-utils (npm)

The package @amber-team/amazon-utils was found to contain malicious code...

MAL-2025-9327 Malicious code in @silver-team/sm2kata (npm)

The package @silver-team/sm2kata was found to contain malicious code...

MAL-2025-7735 Malicious code in @crimson-team/semrush-auth (npm)

The package @crimson-team/semrush-auth was found to contain malicious code...

MAL-2025-7078 Malicious code in @amber-team/webpack-config (npm)

The package @amber-team/webpack-config was found to contain malicious code...

MAL-2025-8437 Malicious code in @lion-team/gcp-deploy (npm)

The package @lion-team/gcp-deploy was found to contain malicious code...

MAL-2025-7942 Malicious code in @frozen-team/eslint-config (npm)

The package @frozen-team/eslint-config was found to contain malicious code...

MAL-2025-40086 Malicious code in y-team-header (npm)

The package y-team-header was found to contain malicious code...

MAL-2025-7067 Malicious code in @amber-team/remote-styles (npm)

The package @amber-team/remote-styles was found to contain malicious code...

MAL-2025-7064 Malicious code in @amber-team/react-mobx-utils (npm)

The package @amber-team/react-mobx-utils was found to contain malicious code...

MAL-2025-9270 Malicious code in @ruby-team/sst-tasks (npm)

The package @ruby-team/sst-tasks was found to contain malicious code...

MAL-2025-7060 Malicious code in @amber-team/log-uptime-deploy (npm)

The package @amber-team/log-uptime-deploy was found to contain malicious code...

Dow’s 125-year legacy: Innovating with AI to secure a long future

Founded more than 125 years ago, Dow has demonstrated a commitment to leveraging science to make the world a better place. Today, Dow’s ambition to be the most innovative, inclusive, and sustainable materials science company is supported by a global security team dedicated to keeping employees,...

Siemens RUGGEDCOM CROSSBOW Station Access Controller

SUMMARY RUGGEDCOM CROSSBOW Station Access Controller SAC contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station...

Power Pwn 4.0.1

Power Pwn is a powerful open‑source toolset designed for red‑teaming and security testing within the Microsoft 365 environment, particularly around Copilot, Copilot Studio, and the Power Platform...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Python tool for safe archive handling, path trav...

Who'S the Evil Twin? Differential Auditing for Undesired Behavior

Detecting hidden behaviors in neural networks poses a significant challenge due to minimal prior knowledge and potential adversarial obfuscation. We explore this problem by framing detection as an adversarial game between two teams: the red team trains two similar models, one trained solely on...