37 matches found
New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"
State of AI Usage Report 2026 full report here by LayerX Security reveals the extent of the enterprise AI visibility gap and why most organizations still don't understand where their AI exposure is actually coming from. The research shows that enterprise AI risk is not distributed evenly across...
CVE-2026-45399
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active background tasks across the system and stop tasks belonging to other users via the GET /api/tasks and POST...
Noisy Networks, Nosy Neighbors: Simple Privacy Attacks against Residential Wireless Traffic
Smart devices, such as light bulbs, TVs, fridges, etc., equipped with computing capabilities and wireless communication, are part of everyday life in many households. Previous work has already shown that a passive eavesdropper can derive private information, household routines, etc., from the...
EUVD-2025-100793
Malicious code in casualcobraz3n npm...
EUVD-2025-74841
Malicious code in casualanttomato-56 npm...
Malicious code in casual_antlion-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854c66d044a085214650d5016e27fb8f8fcb5f278faef65102653695f0ef9e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77376
Malicious code in casualhalibut-teagooddev npm...
EUVD-2025-77377
Malicious code in casualdog-silentdev npm...
EUVD-2025-77378
Malicious code in casualantlion-strongdev npm...
Malicious code in casual_halibut-teagooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15441b5f8b15df81efd124b66347bfc2a8cb5bfade06b3ca8ac85f688ca4893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-100278 Malicious code in casual_dog-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9d0fd7ef22d1aeb8f6e047a45164b39bf525ea1ed1634f46c23751ef50e9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in casual_mule_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbca0d8ba10d4f082be433c7d6e8c375aca62c183d73cc2402b4b62fa8e70e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-65077
Malicious code in casualmulez3n npm...
EUVD-2025-55529
Malicious code in casual-red-gibbon npm...
MAL-2025-67117 Malicious code in casual-blush-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c003d334158a29a3ad95455b3c46391f5df6c12b7becf17f5027b575d67255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in casual-red-gibbon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b18b18e62c53b66b968f19976e316039191e6d8ade4045102b37ded8d2906e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55534
Malicious code in casual-amber-bug npm...
MAL-2025-67118 Malicious code in casual-coffee-cephalopod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a7b2bdbe1609b297c3b2001fab719b990a21c786a4cbc1b20e57aff9830a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...