Optimizing Agent Planning for Security and Autonomy

Indirect prompt injection attacks threaten AI agents that execute consequential actions, motivating deterministic system-level defenses. Such defenses can provably block unsafe actions by enforcing confidentiality and integrity policies, but currently appear costly: they reduce task completion...

EUVD-2025-117435

Malicious code in driving-magenta-wasp npm...

EUVD-2025-117064

Malicious code in static-red-wasp npm...

Malicious code in liberal-maroon-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404408d04ed10418987628cff8ad2db7384bf492d2deb3dbc9c014d9d6306348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139038 Malicious code in static-red-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117268

Malicious code in liberal-maroon-wasp npm...

EUVD-2025-117295

Malicious code in intense-teal-wasp npm...

Malicious code in intense-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84096970a88e18d8cff9a02a706bd7d628ca36e75d7e49acc9105668f4611ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-96111

Malicious code in obviouswaspz3n npm...

EUVD-2025-90065

Malicious code in militarywaspz3n npm...

EUVD-2025-75363

Malicious code in unconsciouswasp-appteadev npm...

EUVD-2025-80365

Malicious code in supposedwasp0xrequest npm...

EUVD-2025-69131

Malicious code in majorwaspz3n npm...

MAL-2025-94412 Malicious code in exuberant_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6217c4b2be11184557ebdf988ddd896472ccef415d37f6b213a52ebe66aabd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94595 Malicious code in frail_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783cab17fee258348f54291a55f680765aaaf1e26b415fbdf4db9d6b02c51cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95024 Malicious code in inherent_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91178b15f044ee87ddc0370bd8197fe37bd8de7f1255a2a808b200bf3af472c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-silver-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b4632fb48604a62a2b7de2418e0ba3fce5146fd314745d457ed66394d434bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53789

Malicious code in incredible-violet-wasp npm...

EUVD-2025-55842

Malicious code in apparent-ivory-wasp npm...

Malicious code in slim-plum-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e570edf098ff4ff8ba812c1c9b406057e1ea61acf5529d436fb67df83c70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...