402 matches found
tplmap
Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...
The Same Zero: Why Identical ASR Can Imply Different Guarantees in LLM-Agent Security
LLM-agent security has produced a dense landscape of defenses - prompt hardening, content filters, permission gates, sandboxes - yet no framework tells a deployer what a defense actually guarantees, or where that guarantee comes from. We apply Verification Autonomy Levels VAL - L0: LLM...
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology IT services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecuri...
Malicious code in jade-falcon-hxj855-project (npm)
The package jade-falcon-hxj855-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview damp-jade-sole is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview allied-jade-marmot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview falcon-jade-uhj749-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview famous-jade-felidae is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview ice-e592h-rted6-jade-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview far-jade-porcupine is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-120030
Malicious code in bright-jade-baboon npm...
EUVD-2025-117292
Malicious code in interesting-jade-parrot npm...
EUVD-2025-117152
Malicious code in protestant-jade-penguin npm...
EUVD-2025-117054
Malicious code in strict-jade-muskox npm...
EUVD-2025-117169
Malicious code in personal-jade-parrotfish npm...
EUVD-2025-117516
Malicious code in alright-jade-armadillo npm...
EUVD-2025-117090
Malicious code in slight-jade-owl npm...
MAL-2025-139048 Malicious code in strict-jade-muskox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...