COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers

This paper studies how multimodal large language models MLLMs undermine the security guarantees of visual CAPTCHA. We identify the attack surface where an adversary can cheaply automate CAPTCHA solving using off-the-shelf models. We evaluate 7 leading commercial and open-source MLLMs across 18...

Malicious code in spatial_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389e27ecf2f57391b9122a06b1b4ede3fff3841bdabe75a9e2d72ef849d715c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75578

Malicious code in spatialfalcon-appteadev npm...

EUVD-2025-80484

Malicious code in spatiallarkreplicateautomation npm...

EUVD-2025-80486

Malicious code in spatialgorillareplicateautomation npm...

EUVD-2025-80485

Malicious code in spatialjellyfish0xrequest npm...

MAL-2025-96699 Malicious code in spatial_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e815a6a45707de3eb807f6219084a75c58ba9168e86e6f760148e76dc4d4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial-olive-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdf3c64d0c01757a797004e7240efbab5a2b2dbdb9160783f05c3b13fe70498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51903

Malicious code in spatial-blue-weasel npm...

MAL-2025-70748 Malicious code in spatial-olive-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdf3c64d0c01757a797004e7240efbab5a2b2dbdb9160783f05c3b13fe70498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51901

Malicious code in spatial-olive-mongoose npm...

EUVD-2025-51900

Malicious code in spatial-teal-lobster npm...

EUVD-2025-51902

Malicious code in spatial-chocolate-smelt npm...

EUVD-2025-45213

Malicious code in spatialsnipez3n npm...

EUVD-2025-37183

Malicious code in com.apple.unityplugin.spatialcontroller npm...

Malicious code in com.apple.unityplugin.spatialcontroller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0ce1ef79c10b4d5b8ba64243eefffe9f16596e7b9d80eb7437755b1f547a9 The package com.apple.unityplugin.spatialcontroller was found to contain malicious code...

Evaluation of Vision-LLMs in Surveillance Video

The widespread use of cameras in our society has created an overwhelming amount of video data, far exceeding the capacity for human monitoring. This presents a critical challenge for public safety and security, as the timely detection of anomalous or criminal events is crucial for effective...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987618 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap Limit max values for vht mcs and...