418 matches found
Comet Browser Flaw Lets Hidden API Run Commands on Users’ Devices
SquareX warns Perplexity's Comet AI browser contains a hidden MCP API that bypasses security, allowing attackers to install malware and seize full device control...
Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers
Palo Alto, California, 19th November 2025, CyberNewsWire...
EUVD-2025-179671
Malicious code in comet-areology-exobiology-perturbation npm...
EUVD-2025-179656
Malicious code in comet-xanthus-cosmos-protoplanetarydisk npm...
EUVD-2025-175507
Malicious code in xenon-comet-xo-quantum npm...
EUVD-2025-178495
Malicious code in hugo-plutology-comet-cluster npm...
Malicious code in inflation-weywot-comet-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2494101eede652b8876724d3d4c467b0a2d07002f73e58557044c083908f9847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177397
Malicious code in oscillation-oscillation-accretion-comet npm...
EUVD-2025-179668
Malicious code in comet-cassini-stratigraphy-mensa npm...
EUVD-2025-179659
Malicious code in comet-publish-palynology-farout npm...
EUVD-2025-179661
Malicious code in comet-perturbation-testcafe-astrobiology npm...
EUVD-2025-179660
Malicious code in comet-private-crust-andromeda npm...
EUVD-2025-177636
Malicious code in neutrino-radioastronomy-comet-planetology npm...
EUVD-2025-178210
Malicious code in kastra-perseus-comet-deimos npm...
EUVD-2025-179664
Malicious code in comet-oauth-airbnb-tethys npm...
Malicious code in titan-bootstrap-lynx-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in comet-oauth-airbnb-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9fb8279f61223224e9fbdc329b569ad93d0e71610a041f12d1cb85156c9a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177455
Malicious code in on-planckscale-sequelize-comet npm...