EUVD-2025-176829

Malicious code in quick-serialize-small-bash-delta npm...

EUVD-2025-176329

Malicious code in small-bundle-function-minify-query npm...

EUVD-2025-117088

Malicious code in small-aqua-alligator npm...

firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input 250 KiB can cause the parser to allocate hundreds of megabytes, leading to denial-of-service DoS through memory exhaustion...

EUVD-2025-88729

Malicious code in smallbasiliskz3n npm...

EUVD-2025-78292

Malicious code in smalldragonz3n npm...

MAL-2025-108851 Malicious code in small_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c34b15d1bbde4cea5f0fc9472b5ba92555658368fea15363bc355054b59fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78290

Malicious code in smallviperz3n npm...

EUVD-2025-80532

Malicious code in smallkangaroodumbs npm...

EUVD-2025-51967

Malicious code in small-green-gibbon npm...

EUVD-2025-51963

Malicious code in small-purple-iguana npm...

Malicious code in small-green-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e5e68ce26b59441391645449ea685193e87b947b8b29a8094c04f1f17ccae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51964

Malicious code in small-moccasin-quelea npm...

EUVD-2025-51965

Malicious code in small-magenta-whale npm...

EUVD-2025-51966

Malicious code in small-jade-impala npm...

EUVD-2025-51968

Malicious code in small-coffee-hamster npm...

EUVD-2025-49368

Malicious code in smalllionz3n npm...

EUVD-2025-49369

Malicious code in smallduckz3n npm...

EUVD-2025-45231

Malicious code in smalldormousez3n npm...

EASE: Practical and Efficient Safety Alignment for Small Language Models

Small language models SLMs are increasingly deployed on edge devices, making their safety alignment crucial yet challenging. Current shallow alignment methods that rely on direct refusal of malicious queries fail to provide robust protection, particularly against adversarial jailbreaks. While...