React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

React2Shell continues to witness heavy exploitation, with threat actors leveraging the maximum-severity security flaw in React Server Components RSC to deliver cryptocurrency miners and an array of previously undocumented malware families, according to new findings from Huntress. This includes a...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell - CVE-2025-55182 Exploit PoC !Securityhttps://...

BIT-FLUX-2022-24877 Improper path handling in kustomization files allows path traversal

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...

Building Browser Agents: Architecture, Security, and Practical Solutions

Browser agents enable autonomous web interaction but face critical reliability and security challenges in production. This paper presents findings from building and operating a production browser agent. The analysis examines where current approaches fail and what prevents safe autonomous operatio...

When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security

The Race for Every New CVE Based on multiple 2025 industry reports: roughly 50 to 61 percent of newly disclosed vulnerabilities saw exploit code weaponized within 48 hours. Using the CISA Known Exploited Vulnerabilities Catalog as a reference, hundreds of software flaws are now confirmed as...

MAL-2025-186063 Malicious code in centaurus-miranda-meteor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9dfde358d6a071c63d8cd5d8c57a54d7e60b2c7c26ccf05411518e4daeeb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425d62c2fe93005aba711c27f189388e923663ac5612acf61c08578432e08530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162134 Malicious code in nokire-abimanyu22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032337113d550b869ee3ef9faef1afdb91b9bcc8f9fbc66a2403bac8e9ff21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-yakutsk-celeste-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90591d766829f3a790ea4d9c1652e0505ea1c2f38420ac201bf0912f328d2cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115907

Malicious code in build-webdriver-mocha-ganymede-luna npm...

Malicious code in gulp-nodejs-bellatrix-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51c5af9497d648c837690d26c1883cd6827d6a576e08da0c2774ab1f1c3bf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119043 Malicious code in candra-semur73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf70aeba29b7a5b9e1a4d16296fb0178e11f8cb0538456d5aa08a3091fc762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118420 Malicious code in zaki-gandul80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a495bd90ab81249e77a80941ea431171b89610405a10fed77bf916ec2dcdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1b17f0089f09b2b0e23dd44e5c2103c52dbddc2d346186e9e3dc3da7194e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271f2bd18c22367ebb4d8e0d6830ec4a1463e1a5a91e8abfc85b68f9d09a980f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4b4520a0e39849c99ba4064b891cc90dc8121ce16c0fab2cfae85840360bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c27d14ed65f0a239aae425b76e6cf59dca80344862644b3ea46c984755585fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tempe33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78d4e755c9c0a7efdce38edb06dde36a38dacbc5b906cd4b286a2993c120c05 The package candra-tempe33-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

How to Automate Cyber Risk Remediation: A Playbook

Trying to manage modern cyber risk with manual processes is like trying to empty the ocean with a bucket. Your team works hard, but the sheer volume of vulnerabilities makes it feel like you’re barely making a dent. You close one ticket, and ten more appear. This approach is unsustainable and...