AI Pulse: The First Agentic Cyber Week

In 2025, AI bots officially entered Cyber Week. Learn how agents shaped traffic and shopper intent — and why retailers must optimize for AI-driven commerce...

Malicious code in discord-selfsbotsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b56aa48c0654abd06a9d624b8c1b5ab4ce170399068d97b994bb4d63635bf18a Once run, package downloads and installs an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

How Thales Protects Online Retail Sites from AI-Driven Bots during Holiday Shopping Season

Every November and December, online retailers gear up for their biggest revenue surge of the year. But while the traffic and transactions climb, so does the threat level. Cybercriminals know exactly when customer activity and the pressure on retail systems is at its highest and they’re automating...

MAL-2025-136416 Malicious code in putri-naget30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7e95515c293d71c8c8846b8de25029ecea9adbd8a4fd16116b4d4e06b9b958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112830 Malicious code in bayu-nasiuduk66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afff8279a94bf585f2f11372a5e2e6cca0b4c0018f6228d55327df57eb280ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AI Pulse: AI Bots Are Targeting Commerce, Publishers, and High Tech

...

YouTube ‘Ghost Network’ Spreads Infostealer via 3,000 Fake Videos

Check Point Research exposed a sophisticated, role-based operation called the YouTube Ghost Network, distributing dangerous Lumma and Rhadamanthys Infostealer malware. Learn how cybercriminals use hijacked channels and bots to triple malicious video output and steal user credentials...

RoBCtrl: Attacking GNN-Based Social Bot Detectors Via Reinforced Manipulation of Bots Control Interaction

Social networks have become a crucial source of real-time information for individuals. The influence of social bots within these platforms has garnered considerable attention from researchers, leading to the development of numerous detection technologies. However, the vulnerability and robustness...

AI Pulse: OpenAI’s Wild Bot Behavior After GPT-5

The AI Pulse series breaks down traffic trends and what they mean for apps, APIs, and businesses. In this post, read how OpenAI’s bots are changing after GPT-5...

EUVD-2021-11982

Malware in sbrugna...

EUVD-2023-36740

Malicious code in bioql PyPI...

EUVD-2025-21651

Malicious code in bioql PyPI...

EUVD-2022-24507

Malicious code in bioql PyPI...

EUVD-2025-26082

Malicious code in bioql PyPI...

EUVD-2022-43219

Malicious code in bioql PyPI...

EUVD-2024-43991

Malicious code in bioql PyPI...

EUVD-2023-26856

Malicious code in bioql PyPI...

EUVD-2022-25080

Malicious code in bioql PyPI...

From Scraping to Paying: Monetizing AI Bots at the Edge

...

PT-2025-34988

Name of the Vulnerable Software and Affected Versions: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress versions through 11.58 Description: The plugin is susceptible to unauthorized data access due to an inadequate capability check within the...