Friday Squid Blogging: Squid Overfishing in the South Pacific

Regulation is hard: The South Pacific Regional Fisheries Management Organization SPRFMO oversees fishing across roughly 59 million square kilometers 22 million square miles of the South Pacific high seas, trying to impose order on a region double the size of Africa, where distant-water fleets...

Friday Squid Blogging: Jumbo Flying Squid in the South Pacific

The population needs better conservation. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

PrivFly: A Privacy-Preserving Self-Supervised Framework for Rare Attack Detection in IoFT

The Internet of Flying Things IoFT plays a vital role in modern applications such as aerial surveillance and smart mobility. However, it remains highly vulnerable to cyberattacks that threaten the confidentiality, integrity, and availability of sensitive data. Developing effective intrusion...

CVE-2025-23710

Cross-Site Request Forgery CSRF vulnerability in Mayur Sojitra Flying Twitter Birds flying-twitter-birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through = 1.8...

Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach

A meter-long flying neon squid Ommastrephes bartramii was found dead on an Israeli beach. The species is rare in the Mediterranean. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

EUVD-2025-105176

Malicious code in flyingopossumz3n npm...

EUVD-2025-74639

Malicious code in flyingporpoisecopper-85 npm...

EUVD-2025-76831

Malicious code in flyingalbatross-appteadev npm...

Malicious code in flying_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cabdaffa132cdab782c6aa6c01bae15d4fd35307370c77fb5bd3d3a03367a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79213

Malicious code in flyingrabbitz3n npm...

MAL-2025-95740 Malicious code in okay_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57d9d77c8e58937a96cb01b424fbc1331a2b4847013c558a16bf13de3967fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64002

Malicious code in flying-copper-swallow npm...

EUVD-2025-64001

Malicious code in flyingmeerkatrequirement npm...

Malicious code in flying-copper-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b26bd9cdb9b177dfe31611f44d8dfc97579e322e216d9b7977cdc00b759abcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86009

Malicious code in flyingrattlesnakez3n npm...

Malicious code in flying_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f216cd5658241ba3b7c703e3d01f780e8299f54476524430860505483718a6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54275

Malicious code in flying-moccasin-lizard npm...

Malicious code in flying-amaranth-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b2d80540bc5205d211cf4017dd5090358cb30a92ceb4e2c2e269e2df11cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54277

Malicious code in flying-coffee-buzzard npm...

EUVD-2025-54278

Malicious code in flying-amethyst-gayal npm...