vulnhunt-agent

Vulnerability Hunting Agent An LLM agent that reads code,...

[SECURITY] Fedora 44 Update: zeal-0.8.0-2.fc44

Zeal is a simple offline documentation browser inspired by Dash...

cyberops-security-suite

CyberOps Security Suite A comprehensive cybersecurity operati...

Synchronized DNA Sources for Unconditionally Secure Cryptography

Secure communication is the cornerstone of modern infrastructures, yet achieving unconditional security -resistant to any computational attack- remains a fundamental challenge. The One-Time Pad OTP, proven by Shannon to offer perfect secrecy, requires a shared random key as long as the message,...

[SECURITY] Fedora 42 Update: helix-25.07.1-7.fc42

A Kakoune / Neovim inspired editor, written in Rust...

[SECURITY] Fedora 43 Update: helix-25.07.1-7.fc43

A Kakoune / Neovim inspired editor, written in Rust...

LLM Security and Safety: Insights from Homotopy-Inspired Prompt Obfuscation

In this study, we propose a homotopy-inspired prompt obfuscation framework to enhance understanding of security and safety vulnerabilities in Large Language Models LLMs. By systematically applying carefully engineered prompts, we demonstrate how latent model behaviors can be influenced in...

Bill Largent: On epic reads, lifelong learning, and empathy

Welcome to another episode of Humans of Talos! This week, Amy sits down with William Bill Largent from the Strategic Planning and Communications team. Bill's role as Senior Security Researcher spans from threat research to communicating Talos's critical work to internal teams, partners, and...

Prompt Engineering Vs. Fine-Tuning for LLM-Based Vulnerability Detection in Solana and Algorand Smart Contracts

Smart contracts have emerged as key components within decentralized environments, enabling the automation of transactions through self-executing programs. While these innovations offer significant advantages, they also present potential drawbacks if the smart contract code is not carefully design...

Malicious code in global-schema-unuk-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef95ff16cdf95db51f17b07305ed739636baecdca77c9ac45f76f5a27c7d581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2019bbf1e7b6c2b854fd035e196ee689e6ec7c36178b2bf8e0774563fe1c807d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2431b93a2987cd3cf6ed51d090bc9323f5ca12103718bd1ec6c16e2e325d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-ffigagpgafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37af971a29cc9cd531bea9378f3982a5f10eb7fbc394526a47722fe2cd5f97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889a0d2105ad2225b5583469750198a2605b467e2e554c5b18d4ad616be2b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161803 Malicious code in namae-nadugsua-napuyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fa1b988b9e21c16e2dd507bb77cbf5d9d7b6ef134c5b3bdf9c439a34a4ec24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164742 Malicious code in rino-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1742935faa6b3dadc6d35b5d05524d854947509c1bebbdf41d261124601743d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasiuduk24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e4f32bd1b67f22f4260203e79b7b82a47836003477bdddd1a5263f2157c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-jamblang2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eee5881de9a5059dba2d2d2fd6373fd02106c3de14fd9d184c6738f5985926c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117948 Malicious code in wasteful_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a699c32d1901da216eb5d8283df01df8be2dc09dcf8ef5b4fc04e869f34796b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...