Ruse

Ruse Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition systems. Installation 1 Easy Method: Wait and download app from appropriate app store. 2 Download and run ios app via XCode see Development setu...

OpenAttack

Documentation • Features & Uses • Usage Examples • Attack Models • Toolkit Design OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating...

Anti-Tamper-Perturbation

🛡️ Anti-Tamper Protection for Unauthorized Individual Image Generation Official Code for ICCV 2025 Paper 📄 Anti-Tamper Protection for Unauthorized Individual Image Generation ⚙️ Environment Setup conda create --name ATP --file requirements.txt conda activate ATP 🔐 Launch ATP 1. Download Dataset...

Perturbed-Embedding-Vectors

Jailbreaking Open-Weight LLMs via Random Embedding Perturbations: runs, labels and code Code and data for the paper Jailbreaking Open-Weight LLMs via Random Embedding Perturbations. Link to the pre-print of the paper- https://arxiv.org/abs/2610.07125 Authored by the amazing people of the...

Spiking Neural Networks Are Harder to Steal: A Benchmark Study of Model Stealing Attacks

Machine learning models deployed behind query interfaces expose more than their predictions, because an adversary can use those predictions to rebuild the model itself. Model stealing attacks MSAs exploit this exposure by training a surrogate model that replicates the decision behavior of a targe...

SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy

Face recognition systems are deployed widely enough that a photograph shared online can be matched without its subject's consent. Generator-based protection methods rely on heavy pretrained backbones, multi-stage inference or visible semantic edits. We introduce SSM-Attack, a black-box face priva...

Region-Level Black-Box Defense against Stealthy Embedding-Space Backdoors in CLIP

Contrastive Language--Image Pretraining CLIP has emerged as a dominant vision backbone due to its strong transferability and zero-shot capabilities. However, recent studies reveal a critical vulnerability: embedding-space backdoor attacks. By poisoning only a tiny fraction of image--text pairs,...

Malicious code in juno-pyxis-barnard-perturbation (npm)

Source: amazon-inspector 03ba7667bb839b545547f830a7cd64064ebb2ed6a65582c2229a5f9a02be6dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

A Novel Steganography Scheme Using Quantum Hilbert Transform

The main goal of steganography is to transmit hidden messages in legitimate-looking communication messages. Phase-domain information hiding, however, has not been fully explored for quantum systems. This work introduces a finite-dimensional Quantum Hilbert Transform QHT as a unitary phase operato...

Malicious code in dotenv-safe-kastra-atlas-perturbation (npm)

The package dotenv-safe-kastra-atlas-perturbation was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dagda-geckodriver-perturbation-geodynamo (npm)

Source: amazon-inspector 1aa898dd9b0ecf67bf135b03027d809bf8a597128a8fb16ea32387a5fd838ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in crust-jekyll-perturbation-protoplanetarydisk (npm)

The package crust-jekyll-perturbation-protoplanetarydisk was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cosmology-geodynamo-blaze-perturbation (npm)

Source: amazon-inspector 3ba766eb5f32777db3374986c46fd236e4668d7897069846749971a67037b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in comet-perturbation-testcafe-astrobiology (npm)

Source: amazon-inspector e462547470bd8d605db068ddab1aa784e3364768af7f6f5f9b691f06acdfba59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in comet-areology-exobiology-perturbation (npm)

Source: amazon-inspector ac451f944be29580351eac0dccac375a279a8129179ac8cdb869585117c5f018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cladistics-interstellarmedium-aether-perturbation (npm)

The package cladistics-interstellarmedium-aether-perturbation was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in baryon-perturbation-javascript-pyxis (npm)

Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in axios-neutrino-fomalhaut-perturbation (npm)

Source: amazon-inspector 8f428902c9048480558a598f879ec355d21f923763d3b297f190013b90c371cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm)

Source: amazon-inspector f3bf298157c040760bce94b452e888389305beacf18b29f6f82b92ab32890e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

CAPTCHAs in the Agentic Era: Solvers That Learn from Every Encounter

Vision-language models VLMs can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs as much time and compute as the first. Specialized detectors invert the...