QueryIPI: Query-Agnostic Indirect Prompt Injection on Coding Agents

Modern coding agents integrated into IDEs combine powerful tools and system-level actions, exposing a high-stakes attack surface. Existing Indirect Prompt Injection IPI studies focus mainly on query-specific behaviors, leading to unstable attacks with lower success rates. We identify a more sever...

Malicious code in @aml-ark/ark-experience-byteplus (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b9a81d78ce8d8f1da9a31e80166834c3098ef03d5ef0e58e1a03d1d93418314 Any computer that has this package installed or running should be considered...

Malicious code in dhhdbank92013 (npm)

The package dhhdbank92013 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in ragstack-ai (npm)

The package ragstack-ai was found to contain malicious code...

Malicious code in jvector-release (npm)

The package jvector-release was found to contain malicious code...

Malicious code in dhnas (npm)

The package dhnas was found to contain malicious code...

Malicious code in frontend-vite (npm)

The package frontend-vite was found to contain malicious code...

MAL-2025-48719 Malicious code in ldhpgemrdhs60152 (npm)

The package ldhpgemrdhs60152 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

EUVD-2025-35727

Captive Portal can expose sensitive information...

Malicious code in node-dev-config (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in example-ssr (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48831 Malicious code in dayotest21938 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in circuit-runtime-test (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-53050

...

CVE-2025-53051

CVE-2025-53051 affects Oracle Database Server’s RDBMS Functional Index component, with affected versions 23.4–23.9. The vulnerability enables a high-privilege SYSDBA attacker, with network access via Oracle Net, to read a subset of RDBMS Functional Index data. The CVSS base score is 2.7 (LOW) wit...

CVE-2025-53052

...

EUVD-2025-35164

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

Malicious Package

Overview funny-pad is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in internallib_v808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdc267dc80d71e5150428ae279537b44916538d5b6e8d47b236ee01902ef1516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JLSEC-2025-158 An issue was discovered in GNOME GLib before 2.66.8

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...