This Week in Spring - June 2nd, 2026

Hi, Spring fans, and welcome to another momentous installment of This Week in Spring! A lot to get into this week, but let's first take some time to address the meta: where are the May releases? If you read our May 11th post, you know they've been delayed. We wanted to speak a bit more about why ...

Measuring Real-World Prompt Injection Attacks in LLM-Based Resume Screening

LLMs are vulnerable to prompt injection attacks. However, this vulnerability has been primarily demonstrated conceptually in academic studies or through a few anecdotal case studies. Its prevalence and impact in real-world LLM-based applications are largely unexplored. In this work, we present th...

How Data Brokers Can Fuel Violence Against Public Servants

A new report from the Public Service Alliance finds state privacy laws offer public servants few ways to protect their private data, even as threats against them are on the rise...

Cybersecurity in the Public Sector: Challenges, Strategies and Best Practices

Public sector cybersecurity faces outdated systems, budget gaps, and rising attacks. Learn key challenges, defense strategies, and proven best practices...

MAL-2025-136739 Malicious code in rising_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89026

Malicious code in risingkingfisherz3n npm...

EUVD-2025-89025

Malicious code in risingplanarianz3n npm...

MAL-2025-116859 Malicious code in rising_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f5c79e68b8378b1c6cf9d11f2c01dea8e7e0b447302ed195f95ba8531eeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78402

Malicious code in risingmolez3n npm...

EUVD-2025-80693

Malicious code in risingdamselfly0xrequest npm...

Malicious code in rising_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8f021b2c910dc192c57630a91c3d8af7dee0cb9f25e5aa3acc7cff560df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73907

Malicious code in risingternrequirement npm...

EUVD-2025-73908

Malicious code in risingsquirrelz3n npm...

Malicious code in rising_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167572cf1404614873a14bcdde521823c527601d895f8c06e7a83b2fd5760e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67029

Malicious code in risingquailz3n npm...

EUVD-2025-67028

Malicious code in risingslothz3n npm...

Malicious code in rising_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7214d4a7ce2ac845f1c0b816978cf1a65f7e698c49ba92529c4c5ba626177976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52251

Malicious code in rising-green-otter npm...