418 matches found
MAL-2025-180757 Malicious code in teate-thy-sonic-nowef (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b8c079c9905441bf93f58dccc9a644e0414bbf14ba6101370bffecf50b95a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
UBUNTU-CVE-2025-40159
In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc and then lead to UBs or just invalid frames to be queued for xmit...
CVE-2025-40159
CVE-2025-40159 applies to the Linux kernel’s XSK/XDP path. The issue arises from accepting clearly invalid userspace-provided xdp_desc values, allowing validation to pass under certain overflow conditions. Root cause: desc->len can reach values near U32_MAX, and desc->addr (u64) can interac...
MAL-2025-137315 Malicious code in tiara-ruwet6-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526802fa15e31bbb9b3f643c9b6f31a9a8d738ee0a0cda8989cb790df485e5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-90733 Malicious code in sporting_caterpillar_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589ca112338abf6bcad91da1db2dc3a319643686568bebf7a6ae71f82091cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in budi-keripik37-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869eba999d57242086375394d84a012d11b7e7017cbe59020b81ad78f2073bb4 The package budi-keripik37-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
PromoGuardian: Detecting Promotion Abuse Fraud with Multi-Relation Fused Graph Neural Networks
As e-commerce platforms develop, fraudulent activities are increasingly emerging, posing significant threats to the security and stability of these platforms. Promotion abuse is one of the fastest-growing types of fraud in recent years and is characterized by users exploiting promotional activiti...
Rewiring Democracy is Coming Soon
My latest book, Rewiring Democracy: How AI Will Transform Our Politics, Government, and Citizenship , will be published in just over a week. No reviews yet, but you can read chapters 12 and 34 of 43 chapters total. You can order the book pretty much everywhere, and a copy signed by me here. Pleas...
Are LLMs Reliable Rankers? Rank Manipulation Via Two-Stage Token Optimization
Large language models LLMs are increasingly used as rerankers in information retrieval, yet their ranking behavior can be steered by small, natural-sounding prompts. To expose this vulnerability, we present Rank Anything First RAF, a two-stage token optimization method that crafts concise textual...
EUVD-2020-6868
Malware in sbrugna...
EUVD-2014-8505
Malware in sbrugna...
EUVD-2021-10345
Malware in sbrugna...
EUVD-2007-6609
Malware in sbrugna...
EUVD-2020-29948
Malware in sbrugna...
EUVD-2024-2499
Malicious code in bioql PyPI...
EUVD-2022-33778
Malicious code in bioql PyPI...
EUVD-2025-14348
Malicious code in bioql PyPI...
EUVD-2025-31662
Malicious code in bioql PyPI...