149 matches found
EUVD-2025-54129
Malicious code in giant-plum-swan npm...
EUVD-2025-54131
Malicious code in giant-amaranth-platypus npm...
MAL-2025-68520 Malicious code in giant-plum-swan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1de30b11b7eb9617ef99bc617936a79e279f1035e7c24ca3fcf26ed0c795846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54130
Malicious code in giant-pink-wildfowl npm...
EUVD-2025-50121
Malicious code in giantbirdz3n npm...
Malicious code in giant_bird_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81660a75f1931a80f9eb9dfc2a29446fbde1e42495f7cf8d2af71ecbb22f71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Friday Squid Blogging: Giant Squid at the Smithsonian
I can't believe that I haven't yet posted this picture of a giant squid at the Smithsonian. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...
Friday Squid Blogging: Sperm Whale Eating a Giant Squid
Video. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...
EUVD-2025-32497
If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged...
Friday Squid Blogging: Giant Squid vs. Blue Whale
A comparison aimed at kids...
MAL-2025-8450 Malicious code in @malware-test-adapt-redds-crees-giant/test-mlw3-adapt-redds-crees-giant (npm)
The package @malware-test-adapt-redds-crees-giant/test-mlw3-adapt-redds-crees-giant was found to contain malicious code...
GLOBAL GROUP Ransomware Claims Breach of Media Giant Albavisión
GLOBAL GROUP Ransomware targets media giant Albavisión, claims 400 GB data theft as it continues hitting global sectors with advanced extortion tactics...
Friday Squid Blogging: The Giant Squid Nebula
Beautiful photo. Difficult to capture, this mysterious, squid-shaped interstellar cloud spans nearly three full moons in planet Earth's sky. Discovered in 2011 by French astro-imager Nicolas Outters, the Squid Nebula's bipolar shape is distinguished here by the telltale blue emission from doubly...
Meta Starts Showing Ads on WhatsApp After 6-Year Delay From 2018 Announcement
Meta Platforms on Monday announced that it's bringing advertising to WhatsApp, but emphasized that the ads are "built with privacy in mind." The ads are expected to be displayed on the Updates tab through its Stories-like Status feature, which allows ephemeral sharing of photos, videos, voice...
CVE-2024-48778
An issue in GIANT MANUFACTURING CO., LTD RideLink tw.giant.ridelink 2.0.7 allows a remote attacker to obtain sensitive information via the firmware update process...
Friday Squid Blogging: Japanese Divers Video Giant Squid
The video is really amazing. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered...
Malicious code in green-giant (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5124a99877f0c6c7c80799d23850b5b5c3f7f308ecdbfcfba13300c69a3fd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3493 Malicious code in green-giant (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5124a99877f0c6c7c80799d23850b5b5c3f7f308ecdbfcfba13300c69a3fd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Friday Squid Blogging: Two-Man Giant Squid
The Brooklyn indie art-punk group, Two-Man Giant Squid, just released a new album. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered...