BYOT-CPS: A Hybrid Cyber-Physical Systems Testbed for IoT Security Assessment and Platform Evaluation

Internet of Things IoT security research continues to face a methodological gap between scalable virtual experimentation and realistic device behaviour. While pure simulation and emulation platforms provide control, repeatability, and scale, they do not fully reproduce firmware-specific behaviour...

EUVD-2026-3498

Malicious code in theme-neutral npm...

Malicious Package

Overview theme-neutral is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-371 Malicious code in theme-neutral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9701381076541b8fbe448e03eb174cb40e2fd27237bfb442f219bf94911d035 The package theme-neutral was found to contain malicious code. Source: ghsa-malware 50a19fb9e329c206942de6cdd79f346a105320f4e71d0b652b154001b1dde8e7...

Satellite Cybersecurity across Orbital Altitudes: Analyzing Ground-Based Threats to LEO, MEO, and GEO

The rapid proliferation of satellite constellations, particularly in Low Earth Orbit LEO, has fundamentally altered the global space infrastructure, shifting the risk landscape from purely kinetic collisions to complex cyber-physical threats. While traditional safety frameworks focus on debris...

VEIL: Jailbreaking Text-To-Video Models Via Visual Exploitation from Implicit Language

Jailbreak attacks can circumvent model safety guardrails and reveal critical blind spots. Prior attacks on text-to-video T2V models typically add adversarial perturbations to obviously unsafe prompts, which are often easy to detect and defend. In contrast, we show that benign-looking prompts...

EUVD-2025-74424

Malicious code in neutralhoverflymaroon-42 npm...

EUVD-2025-76196

Malicious code in neutralllama-appteadev npm...

EUVD-2025-76197

Malicious code in neutralbaboon-appteadev npm...

Malicious code in neutral_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37159454b70f61d5ad89997f1f8e0d6395e89c5f5dfe254642a9eb6ed4521fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62913

Malicious code in neutralprimatez3n npm...

EUVD-2025-62912

Malicious code in neutralturtlez3n npm...

Malicious code in neutral_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c5a92516e78a34e4d460958c2e033d5b538aeec7e0569407948a373f54103d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95639 Malicious code in neutral_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a6ac43938a656b95592c8fd32531c59c04a239e75a5ff4e7b66f0ba8a1494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a4d1bca20dcff17015c0b303cdb606076fb5342ada71554e9fa09eaa80c724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88773 Malicious code in neutral_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df325d8e13ee214b1bee0335c9b78933cca7894625b6daf3b989072b234f39e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53042

Malicious code in neutral-black-aardwolf npm...

Malicious code in neutral-olive-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea501c769ba693b95ea99f724982890bc19e4be82874d45623b21cbb7193b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53040

Malicious code in neutral-olive-turtle npm...

EUVD-2025-53041

Malicious code in neutral-copper-viper npm...