MAL-2025-70657 Malicious code in sleepy-gold-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8c66c29fbc5e5ae3628a55c6b5acf7998ce0e5db4f9d9ff28402fc635a3a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70654 Malicious code in sleepy-aqua-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5c382e2534160271c6c8a87d10bd4fc3c73102fa4bfb10d05d9d3dd04bfebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-chocolate-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753afef19465c18cc6d98e10fa0a5cb965eb1ca79741bf987d583a1f40f6aac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51994

Malicious code in sleepy-chocolate-cephalopod npm...

EUVD-2025-51992

Malicious code in sleepy-gold-swallow npm...

EUVD-2025-51993

Malicious code in sleepy-chocolate-hare npm...

MAL-2025-70656 Malicious code in sleepy-chocolate-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97bd92028de35ee43baf50a7843956235e5ad20100b5a5211c3e01beac23f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49375

Malicious code in sleepyflamingoz3n npm...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from calls to potentially sleepy functions in an atomic context that could lead to system instability...

New Attack Technique 'Sleepy Pickle' Targets Machine Learning Models

The security risks posed by the Pickle format have once again come to the fore with the discovery of a new "hybrid machine learning ML model exploitation technique" dubbed Sleepy Pickle. The attack method, per Trail of Bits, weaponizes the ubiquitous format used to package and distribute machine...

Countly Cross Site Scripting

Exploit Title: Countly-server StoredPersistent XSS Vulnerability Date: Monday - 2018 13 August Author: 10:10AM Team Discovered By: Sleepy Software Link: https://github.com/Countly/countly-server Version: All Version Category: Web-apps Security Risk: Critical Tested on: GNU/Linux Ubuntu 16.04 - wi...

Netflix Sleepy Puppy Cross-Site Scripting Payload Framework

Most automated scanning and security tools that ferret out cross-site scripting vulnerabilities don’t do much analysis beyond the target application. Netflix this week, however, released to open source a tool developed in-house that persists beyond the target app and can flag potential XSS troubl...

XSS Payload Management Framework: Sleepy Puppy

Sleepy Puppy is a cross-site scripting XSS payload management framework which simplifies the ability to capture, manage, and track XSS propagation over long periods of time. Why Should I use Sleepy Puppy? Often when testing for client side injections HTML/JS/etc. security engineers are looking fo...