MAL-2025-188509 Malicious code in paleoclimatology-framework-mensa-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12f313dedc707d720600d06707caee7d75a5cb19e5f99bedf1d25cd3c43b861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188679 Malicious code in phoebe-tectonophysics-nestjs-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd888d6bcb75b1377585f5ef0208e469e98c0a51f5b88bce71e7f2fa36034a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179462

Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade npm...

EUVD-2025-178835

Malicious code in framework-rimraf-buffer-csrf npm...

EUVD-2025-176441

Malicious code in selenium-uranology-quantum-computing-framework npm...

EUVD-2025-178838

Malicious code in framework-bellatrix-await-unuk npm...

Malicious code in titan-soap-request-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4475336a5a70cb1e641daf750eece75d4e129c72b58ce76a12e6f8b504a07c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177373

Malicious code in paleoclimatology-framework-mensa-spectron npm...

EUVD-2025-179522

Malicious code in cosmos-framework-gacrux-pm2 npm...

Malicious code in selenium-cluster-framework-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e3261b632eb6a730ff1c7db5709620010f8bf20bb163023ccd934c64a084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178832

Malicious code in framework-writable-dotenv-parse-variables-yonder npm...

EUVD-2025-176446

Malicious code in selenium-cluster-framework-eleventy npm...

EUVD-2025-178834

Malicious code in framework-triton-string-farout npm...

EUVD-2025-178263

Malicious code in joviology-nuxtjs-ursa-lacerta npm...

EUVD-2025-177939

Malicious code in materialize-framework-electron-builder-enceladus npm...

EUVD-2025-178836

Malicious code in framework-release-it-fornax-non-blocking npm...

MAL-2025-187047 Malicious code in framework-rimraf-buffer-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd7bd0d93981950b7dfc97b285205d98122fbf996356148515702794779a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187049 Malicious code in framework-umbriel-mongoose-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f5a2bf812a423565a8afa97eec03ecb98096dfa30fdb3f61353f872d6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190158 Malicious code in virgo-framework-dependencies-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0409c65db6f8bd311bf6cb439379b2c52dc1f8fc0a7ab975a69106943fe4e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Phantom Menace: Exploring and Enhancing the Robustness of VLA Models against Physical Sensor Attacks

Vision-Language-Action VLA models revolutionize robotic systems by enabling end-to-end perception-to-action pipelines that integrate multiple sensory modalities, such as visual signals processed by cameras and auditory signals captured by microphones. This multi-modality integration allows VLA...