216 matches found
PT-2025-48236
Name of the Vulnerable Software and Affected Versions validator versions prior to 13.15.22 Description The package validator, in versions prior to 13.15.22, contains an issue related to incomplete filtering of special elements within the isLength function. Specifically, the function does not...
Cross-LLM Generalization of Behavioral Backdoor Detection in AI Agent Supply Chains
As AI agents become integral to enterprise workflows, their reliance on shared tool libraries and pre-trained components creates significant supply chain vulnerabilities. While previous work has demonstrated behavioral backdoor detection within individual LLM architectures, the critical question ...
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack
Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code VS Code extensions on the Open VSX Registry and the Microsoft Extension Marketplace, underscoring how developers have become a prime target for attacks. The sophisticated threat, codenamed...
Incomplete Filtering of One or More Instances of Special Elements
Overview validator is a library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing ...
Incomplete Filtering of One or More Instances of Special Elements
Overview org.webjars.npm:validator is an A library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F...
MAL-2025-48025 Malicious code in cf-editor-generate-variation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14a62fbb55d001821340d17e46fdfe593c097f0b4b31d4df41c3a4f72a2b81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cf-editor-generate-variation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14a62fbb55d001821340d17e46fdfe593c097f0b4b31d4df41c3a4f72a2b81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32981
Malicious code in cf-editor-generate-variation npm...
Malware in cf-editor-generate-variation
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2019-5910
Malware in sbrugna...
EUVD-2019-6702
Malware in sbrugna...
Imperceptible Jailbreaking against Large Language Models
Jailbreaking attacks on the vision modality typically rely on imperceptible adversarial perturbations, whereas attacks on the textual modality are generally assumed to require visible modifications e.g., non-semantic suffixes. In this paper, we introduce imperceptible jailbreaks that exploit a...
EUVD-2024-42919
Malicious code in bioql PyPI...
EUVD-2021-29338
Malicious code in bioql PyPI...
EUVD-2023-32331
Malicious code in bioql PyPI...
EUVD-2023-41768
Malicious code in bioql PyPI...
EUVD-2024-46012
Malicious code in bioql PyPI...
EUVD-2025-28093
Malicious code in bioql PyPI...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
CVE-2025-9389 vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
A vulnerability was identified in vim 9.1.0000. Affected is the function memmoveavxunalignederms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not...