Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime due to improper cleanup of threads in multithreaded environments. An attacker can cause resource exhaustion and degrade application performance by repeatedly initiating requests in a...

PT-2025-50545

Name of the Vulnerable Software and Affected Versions Okta Java Management SDK versions 21.0.0 through 24.0.0 Description The Okta Java Management SDK, used for interacting with the Okta management API, has a potential issue in multithreaded implementations. Versions 21.0.0 through 24.0.0 may...

PT-2025-50553

Name of the Vulnerable Software and Affected Versions Okta Java Management SDK versions 11.0.0 through 20.0.0 Description The Okta Java Management SDK, used for interacting with the Okta management API, is susceptible to race conditions when handling concurrent requests utilizing the ApiClient...

EUVD-2025-199181

Malicious code in @lessondesk/api-client npm...

Malicious code in @varsityvibe/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a44aba3b7acd04a01442d5b341474ac6638d772aaac1716a726e819d48611 The package @varsityvibe/api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in haufe-axera-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49957e5f8983a7e16bd6d6377b03e200addbb6bd6dcd834f6370b5fa5f77061 The package haufe-axera-api-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190962 Malicious code in haufe-axera-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49957e5f8983a7e16bd6d6377b03e200addbb6bd6dcd834f6370b5fa5f77061 The package haufe-axera-api-client was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199081

Malicious code in haufe-axera-api-client npm...

Malicious Package

Overview badgekit-api-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in badgekit-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 845af37fdbb4804eebee38f23aa25a4147f6e1d3a5e908d5d3bbe855105da3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48774 Malicious code in badgekit-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 845af37fdbb4804eebee38f23aa25a4147f6e1d3a5e908d5d3bbe855105da3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2009-3826

Malware in sbrugna...

EUVD-2021-0889

Malware in sbrugna...

EUVD-2021-1049

Malware in sbrugna...

EUVD-2021-0893

Malware in sbrugna...

EUVD-2022-34729

Malicious code in bioql PyPI...

Malicious code in conmendator-api-client (npm)

The package conmendator-api-client was found to contain malicious code...

MAL-2025-17493 Malicious code in conmendator-api-client (npm)

The package conmendator-api-client was found to contain malicious code...

MAL-2025-27904 Malicious code in nuntius-api-client (npm)

The package nuntius-api-client was found to contain malicious code...

Malicious code in dev-api-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 258921e8b616b5a24a74d27aabeedac0438ae3474367a670f6b8d4b3af7a6f26 Any computer that has this package installed or running should be considered...