The Hidden Security Risks of Poor Software Testing

Poor Software Testing can expose hidden flaws, vulnerable dependencies and weak controls, increasing breach risks, downtime and costly fixes after release...

How Dangerous Is Anthropic’s Mythos AI?

Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not release it to the general public. Instead, it would only be available to a select group of companies to scan a...

EUVD-2025-117464

Malicious code in costly-copper-python npm...

EUVD-2025-117465

Malicious code in costly-aqua-whale npm...

Malicious code in costly-aqua-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92653

Malicious code in costlywolverinez3n npm...

EUVD-2025-74784

Malicious code in costlyswordtailolive-83 npm...

EUVD-2025-77213

Malicious code in costlyangelfish-appteadev npm...

Malicious code in costly_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ea8f63b13670df5164b84e3f837015a9e3d917700d37a9afa9cfbb6a506e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79514

Malicious code in costlydovez3n npm...

EUVD-2025-79512

Malicious code in costlyorcaz3n npm...

MAL-2025-101032 Malicious code in costly_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdb6c059cd2b07e90bbbe7dd2d3cf57b7fb04b4fcf4fcc8c9d159d03c32d1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82350

Malicious code in costlyanteater0xrequest npm...

EUVD-2025-82349

Malicious code in costlytoucan0xrequest npm...

Malicious code in costly_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c4874b9871109a54a23cc64b1c7f9a24b266a718cfc019a306e9aae4679ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70969

Malicious code in costlybarracudaz3n npm...

Malicious code in costly_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5c0eb2851440aad34f6dcc38912f6cb315e0b27dfbb1d0ff6d958da288140e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70968

Malicious code in costlypeafowlz3n npm...

MAL-2025-101033 Malicious code in costly_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c7ff24f046d5af3a41279267b83c80dd85408c4c88e8acb769821ef5d8d0ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_puffin_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59dda679d8f4627bad74000fefaa6ca92dba5632ac561ba547d7fd80dc33d394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...