13108 matches found
CVE-2022-27829
Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...
From Rookie to Expert: Manipulating LLMs for Automated Vulnerability Exploitation in Enterprise Software
LLMs democratize software engineering by enabling non-programmers to create applications, but this same accessibility fundamentally undermines security assumptions that have guided software engineering for decades. We show in this work how publicly available LLMs can be socially engineered to...
Software Vulnerability Management in the Era of Artificial Intelligence: An Industry Perspective
Artificial Intelligence AI has revolutionized software development, particularly by automating repetitive tasks and improving developer productivity. While these advancements are well-documented, the use of AI-powered tools for Software Vulnerability Management SVM, such as vulnerability detectio...
2025 CWE Top 25 Most Dangerous Software Weaknesses
The Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Homeland Security Systems Engineering and Development Institute HSSEDI, operated by the MITRE Corporation, has released the 2025 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesseslink is...
Malicious code in elf-stats-storybook-marshmallow-729 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9e1e445ab784bb20608d634e3d9e01c84179338478a75b8029624e3ac3b1dd The package elf-stats-storybook-marshmallow-729 was found to contain malicious code...
Is Vibe Coding Safe? Benchmarking Vulnerability of Agent-Generated Code in Real-World Tasks
Vibe coding is a new programming paradigm in which human engineers instruct large language model LLM agents to complete complex coding tasks with little supervision. Although it is increasingly adopted, are vibe coding outputs really safe to deploy in production? To answer this question, we propo...
Malicious code in ing-ideal-acquiring-shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b98d8794a24b74ed659c1fcc64a270aa27181bb12f41b5b50e714177d46e8cf The package ing-ideal-acquiring-shared was found to contain malicious code...
Malicious code in bybitapi.net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
BackportBench: A Multilingual Benchmark for Automated Backporting of Patches
Many modern software projects evolve rapidly to incorporate new features and security patches. It is important for users to update their dependencies to safer versions, but many still use older, vulnerable package versions because upgrading can be difficult and may break their existing codebase...
ASB-A-388034510
Bulletin has no description...
Malicious code in @accordproject/concerto-linter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a266ef73fe4cd4e7227a57de2c97b342daf2ae0aed81e06b41bd9a55ab02d24 The package @accordproject/concerto-linter was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-177071
Malicious code in prettier-plugin-markdown-json-joviology-filament npm...
EUVD-2025-140620
Malicious code in ksai-kilota-aii npm...
EUVD-2025-104224
Malicious code in lightflamingoz3n npm...
EUVD-2025-78888
Malicious code in littlecardinalz3n npm...
EUVD-2025-81000
Malicious code in overwhelminghornet0xrequest npm...
Malicious code in accessible_puma_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f7a22a4e0a93c060afad76526a3969ba09d3974ba949a9676030f01eb8f31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zaki-kue68-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341ece14fdd3d891304993e85493eb380f6a93c8c7f8d49e453aa03a1648c04 The package zaki-kue68-sluey was found to contain malicious code...
Malicious code in supxmlparser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3875bc6e2e97cfd10a8d926b80d7a78ac31781bad91e61e5960eadd34d87f56 The package supxmlparser was found to contain malicious code...