1885 matches found
MAL-2025-6796 Malicious code in lynx-libs-mono (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dcde725ba12b559bfd1e62b8d6058ced4b0a5ed11b9f168f8f6f576b42ef801 The OpenSSF Package Analysis project identified 'lynx-libs-mono' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6795 Malicious code in productboard-freemail (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a6e97fd17d98afb5fe43af9593d6e212069bdd9fcf008969bb1773d097e22b7 The OpenSSF Package Analysis project identified 'productboard-freemail' @ 10086.0.1113 npm as malicious. It is considered malicious because: - T...
MAL-2025-6793 Malicious code in productboard-eslint-plugin-relay (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50a95e4b008863c195930bcd301dd1f243002839a301a5be5d0078cab7b22786 The OpenSSF Package Analysis project identified...
MAL-2025-6789 Malicious code in dionisio (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eafd017c48863d43324ba67c2aa3770cc03881cca223fccfc91da0e8af92c1fa The OpenSSF Package Analysis project identified 'dionisio' @ 2.0.0 np...
MAL-2025-6790 Malicious code in productboard-html-to-image (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24e8ec19821daa19bdac16799a3680ec30ae9d528b20a58e0d8c5314c9c6d791 The OpenSSF Package Analysis project identified...
MAL-2025-6788 Malicious code in gsochub (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c4ef23e2b37d9180f06b73ca4d6c919d854525b1bdf01ce97cb156df68e2c6b The OpenSSF Package Analysis project identified 'gsochub' @ 8.1.2 npm...
When Good Sounds Go Adversarial: Jailbreaking Audio-Language Models with Benign Inputs
As large language models become increasingly integrated into daily life, audio has emerged as a key interface for human-AI interaction. However, this convenience also introduces new vulnerabilities, making audio a potential attack surface for adversaries. Our research introduces WhisperInject, a...
MAL-2025-6704 Malicious code in byteplus-public-aiso (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6703 Malicious code in byteplus-platform-runtime (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6770 Malicious code in thisisthedaventestz (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Large Reasoning Models Are Autonomous Jailbreak Agents
Jailbreaking -- bypassing built-in safety mechanisms in AI models -- has traditionally required complex technical procedures or specialized human expertise. In this study, we show that the persuasive capabilities of large reasoning models LRMs simplify and scale jailbreaking, converting it into a...
MAL-2025-6700 Malicious code in bp-console-fe-sg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 521bbcab75dfeaca681fe4eedeb12dcfbe52f54514441c4c397cf234030ca4e1 The OpenSSF Package Analysis project identified 'bp-console-fe-sg' @...
MAL-2025-6749 Malicious code in pexels-figma (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6748 Malicious code in pexels-core-sdk (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6745 Malicious code in nr1-github (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in node-calculator-yqhi (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6741 Malicious code in node-calculator-yqhi (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6740 Malicious code in node-calculator-splo (npm)
The package communicates with a domain associated with malicious activity...