Malicious Package

Overview oauth2-jwt-bearer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bfruitmaliciousxmlparser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-192421 Malicious code in vue2-amis-custom-widget123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b467c811b36f60dc7589ccd8251ffc56de7f40345d6a471a3a550a2a8df7e The package vue2-amis-custom-widget123 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in datadog-checks-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81f3e37fe2d626410665826364d682e76edf32642b1cf36d4b12b987a9b102 The package datadog-checks-base was found to contain malicious code. Source: ghsa-malware...

Safe2Harm: Semantic Isomorphism Attacks for Jailbreaking Large Language Models

Large Language Models LLMs have demonstrated exceptional performance across various tasks, but their security vulnerabilities can be exploited by attackers to generate harmful content, causing adverse impacts across various societal domains. Most existing jailbreak methods revolve around Prompt...

MAL-2025-192270 Malicious code in elf-stats-tinsel-candy-605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbef0d18c705f5e2d320ebbffd2ca291c82eeed7bb636c5a582d7388790185 The package elf-stats-tinsel-candy-605 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191960 Malicious code in karem4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1d3bd676881934532a2e75fd644e22b2e4f26fb08bde6d48ff6d529de7467d The package karem4 was found to contain malicious code. Source: ossf-package-analysis b843a0d849da7453ce803b77a117a501a3b1e4b04eae8222d3b59d48438931c...

MAL-2025-191949 Malicious code in kmz1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764e3cb5b5016e17afcd37b7b263ec2575af32008338ff14e72dd73b1d82bfa1 The package kmz1 was found to contain malicious code. Source: ossf-package-analysis 2a6ae2284037ed233d5af5263950214a55a620b61dde2f0b12669eced34b1957...

Malicious code in kkkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5221f3ec4ce8c314da6ded901d34c1ef2a0f7822bbec42d09a218885c47b41b2 The package kkkarem was found to contain malicious code. Source: ossf-package-analysis 85f2f16bc0953b5738e5248e16c823f06c7e3e9805d0e85726a59b9d72a4f3...

Malicious Package

Overview internallibv881 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mayhem-wma is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview initial-path is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

"To Survive, I Must Defect": Jailbreaking LLMs Via the Game-Theory Scenarios

As LLMs become more common, non-expert users can pose risks, prompting extensive research into jailbreak attacks. However, most existing black-box jailbreak attacks rely on hand-crafted heuristics or narrow search spaces, which limit scalability. Compared with prior attacks, we propose Game-Theor...

Malicious code in sabua-muyafig-budafauaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571b0c4777b12e0ee5833f3dc3970eead5ecd2bda6ec892390b044e93a06a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81520b4ac758ea8cd6c0abdf77fa823e36fd11ddbb85ed21117baad312470153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151791 Malicious code in aiboa-milipe-apamumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511dd511ec27f0d1e2882ea6ccf5e1b8922813793a2794e2f8ef3516b9fcb649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164760 Malicious code in rinto-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e89a5f3483fc7791d933594c516e77a1e6fce3094b02ad7b2aa069883a7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-supervisor-phoebe-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7f56182fb0508ccdcfa89d6395ddf24d4f32bb251f2ace9a58c29d899b8d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-geckodriver-lint-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c1c9512158808bf67bb2fec6b55841817afc76f0e0dda0e78ea73460944525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...