CVE-2026-34760 vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before version 0.18.0, Librosa defaults to using numpy.mean for mono downmixing tomono, while the international standard ITU-R BS.775-4 specifies a weighted downmixing algorithm. This discrepancy results...

VoiceSHIELD-Small: Real-Time Malicious Speech Detection and Transcription

Voice interfaces are quickly becoming a common way for people to interact with AI systems. This also brings new security risks, such as prompt injection, social engineering, and harmful voice commands. Traditional security methods rely on converting speech to text and then filtering that text,...

Sparse Autoencoders Are Capable LLM Jailbreak Mitigators

Jailbreak attacks remain a persistent threat to large language model safety. We propose Context-Conditioned Delta Steering CC-Delta, an SAE-based defense that identifies jailbreak-relevant sparse features by comparing token-level representations of the same harmful request with and without...

How Top CISOs Solve Burnout and Speed up MTTR without Extra Hiring

Why do SOC teams keep burning out and missing SLAs even after spending big on security tools? Routine triage piles up, senior specialists get dragged into basic validation, and MTTR climbs, while stealthy threats still find room to slip through. Top CISOs have realized the solution isn’t hiring...

PT-2025-54697

Several builtin functions in Expr, including flatten, min, max, mean, and median, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these functions may recurse...

CVE-2025-68156: Allocation of Resources Without Limits or Throttling

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including flatten, min, max, mean, and median, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation...

EUVD-2025-117236

Malicious code in mean-salmon-canidae npm...

EUVD-2025-117237

Malicious code in mean-peach-porpoise npm...

Malicious code in mean-salmon-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19747e08beef00c0ff50ae824663ccc2a186e08cef376c9a8b33a9708d7b2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103779

Malicious code in meancatfishz3n npm...

MAL-2025-128626 Malicious code in mean_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e61cc7419cf7783d4d69f83b646461ae063335420f6bdda44d27513dd48d657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-96468

Malicious code in meanangelfishz3n npm...

EUVD-2025-96467

Malicious code in meanwildebeestz3n npm...

EUVD-2025-90082

Malicious code in meantyrannosaurusz3n npm...

Malicious code in mean_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbe17fc947e2d27d20e55195899127755ecff4f1ace36826e0223c4f1780d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8e37bc2a96f4061ebb22209dd4394f06d57c3c7dd4d4da3f0ce6ab404043ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90085

Malicious code in meanamphibianz3n npm...

EUVD-2025-90084

Malicious code in meancapybaraz3n npm...

MAL-2025-115802 Malicious code in mean_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8e37bc2a96f4061ebb22209dd4394f06d57c3c7dd4d4da3f0ce6ab404043ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...