On the Dangers of Poisoned LLMs in Security Automation

This paper investigates some of the risks introduced by "LLM poisoning," the intentional or unintentional introduction of malicious or biased data during model training. We demonstrate how a seemingly improved LLM, fine-tuned on a limited dataset, can introduce significant bias, to the extent tha...

MAL-2025-49347 Malicious code in lowerx-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c339fedf47fd9aff8ff17bb12b8d3014f38189be9b38d17606826127b03ff6ba The package lowerx-package was found to contain malicious code...

MAL-2025-49336 Malicious code in dowload_ebok_life_on_earth_by_mike_dooley_sncwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66c61615dbda3a1e20db3240a0b7efb05c24bc394770add24fff4f4891b6f38 The package dowloadeboklifeonearthbymikedooleysncwl was found to contain malicious code...

EUVD-2025-37537

Malicious code in reservas-hilton npm...

MAL-2025-49344 Malicious code in reservas-hilton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5ca347c7af71a9788e40f912d08b88ae5dfae7044f9db24fe5484c00116b55 The package reservas-hilton was found to contain malicious code...

The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations

Security Operations Centers SOC today are overwhelmed. Analysts handle thousands of alerts every day, spending much time chasing false positives and adjusting detection rules reactively. SOCs often lack the environmental context and relevant threat intelligence needed to quickly verify which aler...

CVE-2011-10039

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

MAL-2025-49292 Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...

EUVD-2025-37283

Malicious code in blackbeard-navigator-ctf npm...

Malicious code in gel-gss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548b80c889e1007553fed7b6c39f257eb8e7bb58a140bf4c3b00ba3e23a6934 The package gel-gss was found to contain malicious code...

Malicious code in test882 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31514c1ba67261aad22d186ce1d76ed34c4cda2b146dcf6801fdcb156505dda The package test882 was found to contain malicious code. Source: ghsa-malware a7c1efeed4d026cd9899c479b5b207d5e82ab7fb917f84c402aab7798857bb0d Any...

EUVD-2011-5268

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

Malicious Package

Overview icon-react-fork is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2011-10039

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

CVE-2011-10039 Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

CVE-2011-10039

CVE-2011-10039 affects Nagios XI versions prior to 2011R1.9. The issue is a cross-site scripting (XSS) vulnerability in the web interface, exploitable via the Alert Heatmap report and the “My Reports” listing due to insufficient input validation/escaping. The Red Hat and ENISA records corroborate...

CVE-2011-10039 Nagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

MAL-2025-49123 Malicious code in epic-comment-rating-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e545e5ad95e677ec0468b1254d12e8d5f47eb49cb6261a4ec337fd1c6dee7020 The package epic-comment-rating-service was found to contain malicious code...

MAL-2025-49150 Malicious code in epic-games-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171b5f79dcaf130369e4217640b310c4720b2ce20871c0f9387056defeb66fcd The package epic-games-footer was found to contain malicious code...

MAL-2025-49178 Malicious code in epic-path-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4c76f7c877c65c735a8776d058420e4fbacc14e1421fb9900deed947191704 The package epic-path-utils was found to contain malicious code...