Introducing ÆSIR: Finding Zero-Day Vulnerabilities at the Speed of AI

TrendAI™’s ÆSIR platform combines AI automation with expert oversight to discover zero-day vulnerabilities in AI infrastructure – 21 CVEs across NVIDIA, Tencent, and MLflow since mid-2025...

Janitza UMG 96-PA和Janitza UMG 96-PA-MID+ 安全漏洞

The Janitza UMG 96-PA and Janitza UMG 96-PA-MID+ are both energy management and detection devices from Janitza, Germany. A security vulnerability exists in the Janitza UMG 96-PA and Janitza UMG 96-PA-MID+ that originates from an attacker being able to send a specially crafted Modbus read command,...

EUVD-2025-117231

Malicious code in mid-beige-crow npm...

MAL-2025-138871 Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b73a1e376e24f4f6e19aca23c801fd1970a0f9b1219e31870e2bf59c34b46ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76290

Malicious code in midgerbil-tool npm...

Malicious code in mid_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e409969f771738efdea012b9f0122d82d292a24abac929b2958a2be2b433bb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81234

Malicious code in midbasiliskdumbs npm...

EUVD-2025-81233

Malicious code in middormouse0xrequest npm...

EUVD-2025-63093

Malicious code in midmarsupialz3n npm...

EUVD-2025-63092

Malicious code in midtarantulaz3n npm...

EUVD-2025-53273

Malicious code in mid-scarlet-pike npm...

EUVD-2025-53275

Malicious code in mid-blush-python npm...

EUVD-2025-53271

Malicious code in mid-yellow-gayal npm...

EUVD-2025-53276

Malicious code in mid-apricot-lark npm...

EUVD-2025-53272

Malicious code in mid-scarlet-quail npm...

EUVD-2025-53270

Malicious code in mid-yellow-wildebeest npm...

EUVD-2025-53274

Malicious code in mid-fuchsia-turkey npm...

EUVD-2025-49820

Malicious code in midbeetlez3n npm...

MAL-2025-60851 Malicious code in mid_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5181ada2483429504ab251ae368a5be2b000889d669ca1f260ad31305be7b41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...