When the Abyss Looks Back: Unveiling Evolving Dark Patterns in Cookie Consent Banners

To comply with data protection regulations such as the EU General Data Protection Regulation GDPR and the California Consumer Privacy Act CCPA, websites widely deploy cookie consent banners to collect users' privacy preferences. In practice, however, these interfaces often embed dark patterns tha...

EUVD-2025-175836

Malicious code in umbra-jekyll-foundation-graphql npm...

EUVD-2025-175838

Malicious code in umbra-farout-barnard-redshift npm...

EUVD-2025-180274

Malicious code in async-cressida-umbra-vuepress npm...

EUVD-2025-178967

Malicious code in exosphere-galaxy-planckscale-umbra npm...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

Malicious code in cache-umbra-geoarchaeology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b325ee42e9c4fb0b6333f6448be22adc3ef9fa102f3529f68c8eb58d077bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175839

Malicious code in umbra-enif-sirius-lightyear npm...

Malicious code in sirius-stop-umbra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e55a14a033b2c4791dbf3754b9d92b6fe7fba60595a0c5234a281f5b9d0c6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179061

Malicious code in eris-umbra-dotenv-scorpius npm...

EUVD-2025-175983

Malicious code in test-umbra-elektra-update npm...

Malicious code in cygnus-umbra-webdriver-mocha-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314812afef770b2c68933860419ecd93f198f59bd1b7fbef389f9ff3aeb0ab01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176350

Malicious code in sirius-stop-umbra-spawn npm...

EUVD-2025-175840

Malicious code in umbra-australis-dotenv-safe-google npm...

EUVD-2025-175541

Malicious code in winston-leda-mesosphere-umbra npm...

Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179912

Malicious code in cache-umbra-geoarchaeology-server npm...

EUVD-2025-180221

Malicious code in auth0-sociobiology-apollo-umbra npm...

EUVD-2025-176409

Malicious code in server-redis-umbra-fornax npm...

Malicious code in test-umbra-elektra-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c07c4a11aad899f56c47c7827672845788d476dc8632cfa2e8e99790f69a765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...