Optimizing Agent Planning for Security and Autonomy

Indirect prompt injection attacks threaten AI agents that execute consequential actions, motivating deterministic system-level defenses. Such defenses can provably block unsafe actions by enforcing confidentiality and integrity policies, but currently appear costly: they reduce task completion...

EUVD-2025-117435

Malicious code in driving-magenta-wasp npm...

EUVD-2025-117064

Malicious code in static-red-wasp npm...

Malicious code in intense-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84096970a88e18d8cff9a02a706bd7d628ca36e75d7e49acc9105668f4611ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal-maroon-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404408d04ed10418987628cff8ad2db7384bf492d2deb3dbc9c014d9d6306348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117295

Malicious code in intense-teal-wasp npm...

MAL-2025-139038 Malicious code in static-red-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117268

Malicious code in liberal-maroon-wasp npm...

EUVD-2025-96111

Malicious code in obviouswaspz3n npm...

EUVD-2025-90065

Malicious code in militarywaspz3n npm...

EUVD-2025-75363

Malicious code in unconsciouswasp-appteadev npm...

EUVD-2025-80365

Malicious code in supposedwasp0xrequest npm...

EUVD-2025-69131

Malicious code in majorwaspz3n npm...

MAL-2025-94595 Malicious code in frail_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783cab17fee258348f54291a55f680765aaaf1e26b415fbdf4db9d6b02c51cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95024 Malicious code in inherent_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91178b15f044ee87ddc0370bd8197fe37bd8de7f1255a2a808b200bf3af472c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94412 Malicious code in exuberant_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6217c4b2be11184557ebdf988ddd896472ccef415d37f6b213a52ebe66aabd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52923

Malicious code in opposite-coral-wasp npm...

EUVD-2025-53588

Malicious code in large-fuchsia-wasp npm...

Malicious code in civic-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09644eb5056abf45b687d17181ba94df4cf0d0ae6b8b6c66d65529e6d540b126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4381f62e535937ab5b6e80dcbe55cae92d385e5fedaa811535a5c72cf90ad959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...