When Blockchain Meets Crawlers: Real-Time Market Analytics in Solana NFT Markets

In this paper, we design and implement a web crawler system based on the Solana blockchain for the automated collection and analysis of market data for popular non-fungible tokens NFTs on the chain. Firstly, the basic information and transaction data of popular NFTs on the Solana chain are...

ReGA: Representation-Guided Abstraction for Model-Based Safeguarding of LLMs

Large Language Models LLMs have achieved significant success in various tasks, yet concerns about their safety and security have emerged. In particular, they pose risks in generating harmful content and vulnerability to jailbreaking attacks. To analyze and monitor machine learning models,...

MAL-2025-4624 Malicious code in inter-frontend-svgs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef0c87cb238b6a66e63b6ede215bd1d867b47ff3bcad84258647d55c810c520 The OpenSSF Package Analysis project identified 'inter-frontend-svgs'...

Malicious code in bombombombom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4feeabe972dbf8a97f4ab7dc12a732e46cb7ac49559cccdb432dc3513b3f6c38 The OpenSSF Package Analysis project identified 'bombombombom' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4622 Malicious code in bombombombom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4feeabe972dbf8a97f4ab7dc12a732e46cb7ac49559cccdb432dc3513b3f6c38 The OpenSSF Package Analysis project identified 'bombombombom' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4623 Malicious code in helloworldmyworld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea11c9b6eb65ebdd9deee023e1154599bc86dce39350a49b2589c88f7dce2b31 The OpenSSF Package Analysis project identified 'helloworldmyworld' @ 1.999.2 npm as malicious. It is considered malicious because: - The packag...

Autoregressive Images Watermarking through Lexical Biasing: an Approach Resistant to Regeneration Attack

Autoregressive AR image generation models have gained increasing attention for their breakthroughs in synthesis quality, highlighting the need for robust watermarking to prevent misuse. However, existing in-generation watermarking techniques are primarily designed for diffusion models, where...

Malicious code in moorkh_hai_tu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c9a195959b550bee1eca57f930d21864f781bd0d6be4f65b19ac06c4088570e The OpenSSF Package Analysis project identified 'moorkhhaitu' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4609 Malicious code in moorkh_hai_tu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c9a195959b550bee1eca57f930d21864f781bd0d6be4f65b19ac06c4088570e The OpenSSF Package Analysis project identified 'moorkhhaitu' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4610 Malicious code in shiva_rrrraaaaooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f76f9821127e0fdeb967db2d6c2e889b5e80f28e6bd4083e93266f5d8f4fc136 The OpenSSF Package Analysis project identified 'shivarrrraaaaooo' @ 1.1.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4618 Malicious code in @seo-frontend-components/blog-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 38bc78437090a04d89a5116ac7ad94f3821cfd50c08d81f48528c53e26b6da96 The OpenSSF Package Analysis project identified '@seo-frontend-components/blog-schema' @ 1.999.0 npm as malicious. It is considered malicious...

Malicious code in @seo-frontend-components/card-blog-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfcc9a2754a9e96e7bfd7f7c78281a5016b48feeaa8c61f782bcab5dbe4ae8e The OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-carousel' @ 1.999.0 npm as malicious. It is considered...

MAL-2025-4619 Malicious code in @seo-frontend-components/card-blog-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfcc9a2754a9e96e7bfd7f7c78281a5016b48feeaa8c61f782bcab5dbe4ae8e The OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-carousel' @ 1.999.0 npm as malicious. It is considered...

MAL-2025-4621 Malicious code in @seo-frontend-components/card-blog-entry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12425fa8db62cc4b037b603cc3bd493ff000753ccaaa641ff23788b57484698d The OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-entry' @ 1.999.0 npm as malicious. It is considered maliciou...

MAL-2025-4620 Malicious code in @seo-frontend-components/card-blog-carousel-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1eaa599a9c0235a5d52b5534f4177883c03e7ae19496ef98593fadfc3a7ccef8 The OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-carousel-mobile' @ 1.999.2 npm as malicious. It is considere...

PackHero: a Scalable Graph-Based Approach for Efficient Packer Identification

Anti-analysis techniques, particularly packing, challenge malware analysts, making packer identification fundamental. Existing packer identifiers have significant limitations: signature-based methods lack flexibility and struggle against dynamic evasion, while Machine Learning approaches require...

NetScaler-13.1-EPA scan failed with "Error while parsing client security configuration"

EPA scan failed with "Error while parsing client security configuration" in EPA log. ---------------------------- 2025-02-19 09:03:50.706 | 21708 | DEBUG | D | PRE AUTH EPA | token: |^M 2025-02-19 09:03:50.706 | 21708 | DEBUG | D | PRE AUTH EPA | Policy MACADDRanyofF8BXXXXXX28A returned 2004 |^M...

Local Frames: Exploiting Inherited Origins to Bypass Content Blockers

We present a study of how local frames i.e., iframes with non-URL sources like "about:blank" are mishandled by a wide range of popular Web security and privacy tools. As a result, users of these tools remain vulnerable to the very attack techniques they seek to protect against, including browser...

Dynamic Malware Classification of Windows PE Files Using CNNs and Greyscale Images Derived from Runtime API Call Argument Conversion

Malware detection and classification remains a topic of concern for cybersecurity, since it is becoming common for attackers to use advanced obfuscation on their malware to stay undetected. Conventional static analysis is not effective against polymorphic and metamorphic malware as these change...