212 matches found
Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale
The Model Context Protocol MCP has seen rapid adoption since its November 2024 launch, with over 21,000 server instances detectable on the public internet. We present the first dynamic behavioral security assessment of internet-facing MCP servers, combining passive discovery across eleven data...
Malicious Package
Overview jest-wezen-corvus-nuxtjs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in umbriel-transform-corvus-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0535ab8475a2cfe19c1ada68feab5732883367dc7554d2a673d0616d955ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176281
Malicious code in spawn-corvus-elektra-iota npm...
EUVD-2025-177640
Malicious code in neuromorphic-corvus-rate-limiter-concurrently npm...
EUVD-2025-179558
Malicious code in corvus-javascript-charon-semantic-ui npm...
EUVD-2025-179557
Malicious code in corvus-phylogenetics-metabolomics-puppeteer npm...
EUVD-2025-179152
Malicious code in enceladus-blitz-lynx-corvus npm...
EUVD-2025-180426
Malicious code in antares-aurora-mocha-corvus npm...
EUVD-2025-180045
Malicious code in biotechnology-corvus-phoebe-inquirer npm...
EUVD-2025-179463
Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova npm...
EUVD-2025-176483
Malicious code in scripts-thermochronology-corvus-stop npm...
EUVD-2025-180224
Malicious code in auth0-corvus-webdriver-mocha-chromedriver npm...
EUVD-2025-176767
Malicious code in redis-corvus-transform-dependencies npm...
EUVD-2025-179556
Malicious code in corvus-vuepress-concurrently-elara npm...
Malicious code in antares-aurora-mocha-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889355acffa58cb18b880f4ddd5e587f1056c8f5bbdccc545b03da310c4e347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in corvus-javascript-charon-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3ec6da952c946bcdb511cd68067f74a208ceba883ec29ce8802e9ca8e1554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179717
Malicious code in cli-hermes-mesosphere-corvus npm...