1234 matches found
EUVD-2025-53171
Malicious code in monthly-moccasin-locust npm...
Malicious code in monthly-moccasin-locust (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3cf794d51bb25c9d6629c8dd65cce142b09bae0ab5c11e956859ab33f0f23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53170
Malicious code in monthly-salmon-rhinoceros npm...
EUVD-2025-53172
Malicious code in monthly-emerald-scallop npm...
EUVD-2025-53173
Malicious code in monthly-aquamarine-starfish npm...
EUVD-2025-49777
Malicious code in monthlyearthwormz3n npm...
EUVD-2025-49778
Malicious code in monthlyaardvarkz3n npm...
Malicious code in monthly_earthworm_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b50f73f7e13ef3da0a49f3181db3152fac9be34d9583e6fa5445ce9d779c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-60892 Malicious code in monthly_earthworm_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b50f73f7e13ef3da0a49f3181db3152fac9be34d9583e6fa5445ce9d779c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-46326
Malicious code in monthlyvicunaz3n npm...
MAL-2025-57649 Malicious code in monthly_vicuna_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e66a7160f2a06b7e1f67ef28d7b1b39589e4c36961604e6cce77597d9ef85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
This Week in Spring - November 10th, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this I am preparing for a flight to North Carolina first in flight!. This week's going to be busy, but next week even busier still! I'll be at AI By The Bay in San Francisco, AI Native Dev Con in NYC, and QCon SF i...
Uncovering Qilin attack methods exposed through multiple cases
In the second half of 2025, the ransomware group Qilin has continued to publish victim information on its leak site at a pace of more than 40 cases per month, making it one of the most impactful ransomware groups worldwide. The manufacturing sector has been the most affected, followed by...
October 14, 2025—KB5066872 (Monthly Rollup)
None None...
October 14, 2025—KB5066874 (Monthly Rollup)
None None...
October 23, 2025—KB5070887 (Monthly Rollup) Out-of-band
None None...
October 14, 2025—KB5066875 (Monthly Rollup)
None None...
Your passwords don’t need so many fiddly characters, NIST says
It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it. After nearly four years of work to update and modernize its guidance for how companies, organizations, and businesses should protect their systems and their...
Microsoft Windows inconsistent driver blocking
RISK EVALUATION Microsoft Windows Defender Application Control WDAC and the Microsoft vulnerable driver blocklist do not adequately block known-vulnerable drivers. These unexpected behaviors can confuse users about whether or not driver blocking is working and which drivers are being blocked. 2...