PT-2025-47088

Name of the Vulnerable Software and Affected Versions Ascertia SigningHub versions through 8.6.8 Description A lack of rate limiting on the invite user function allows for an email bombing attack. An authenticated attacker can automate invite requests to a target email address. Recommendations...

BackWeak: Backdooring Knowledge Distillation Simply with Weak Triggers and Fine-Tuning

Knowledge Distillation KD is essential for compressing large models, yet relying on pre-trained "teacher" models downloaded from third-party repositories introduces serious security risks -- most notably backdoor attacks. Existing KD backdoor methods are typically complex and computationally...

drm/amd/display: Do not set DRR on pipe Commit

...

SoK: Security Evaluation of Wi-Fi CSI Biometrics: Attacks, Metrics, and Systemic Weaknesses

Wi-Fi Channel State Information CSI has been repeatedly proposed as a biometric modality, often with reports of high accuracy and operational feasibility. However, the field lacks a consolidated understanding of its security properties, adversarial resilience, and methodological consistency. This...

EUVD-2025-177698

Malicious code in native-rate-limiter-uninstall-regulus npm...

EUVD-2025-178310

Malicious code in janus-fomalhaut-rate-limiter-fusion npm...

EUVD-2025-176791

Malicious code in rate-limiter-fork-command-hyperion npm...

EUVD-2025-178260

Malicious code in json-apollo-rate-limiter-cross-env npm...

Malicious code in rate-limiter-aurora-helmet-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9633e2fd02710c31a807cef01e13aef312acd495a2495f49441b3006042bae81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177640

Malicious code in neuromorphic-corvus-rate-limiter-concurrently npm...

EUVD-2025-178606

Malicious code in hapi-orogeny-tardigrade-rate-limiter npm...

EUVD-2025-175594

Malicious code in webdriverio-rate-limiter-wormhole-version npm...

EUVD-2025-178328

Malicious code in isostasy-rate-limiter-miranda-chalk npm...

EUVD-2025-178033

Malicious code in loglevel-exobiology-eslint-config-rate-limiter npm...

EUVD-2025-175825

Malicious code in umbriel-spica-rate-limiter-auriga npm...

EUVD-2025-176094

Malicious code in supervisor-helios-stream-rate-limiter npm...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190282 Malicious code in webdriverio-rate-limiter-wormhole-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546a55ebdbc1b18fed5bbad6be8b757cfe2c4fa0d1f046a9d5deff7b296f6332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187554 Malicious code in isostasy-rate-limiter-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8886bb1b3aa2881de5d3a090df3f702e15600943bd93f6e415c544b97c814926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189089 Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3665c39d41a5a94032ec0050cb7fbb6f9f77712de1214f36c8fa0b624f6c78b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...