EUVD-2025-20936

Malicious code in bioql PyPI...

EUVD-2025-20902

Malicious code in bioql PyPI...

EUVD-2025-20073

Malicious code in bioql PyPI...

EUVD-2023-43708

Malicious code in bioql PyPI...

EUVD-2023-43707

Malicious code in bioql PyPI...

EUVD-2024-46501

Malicious code in bioql PyPI...

EUVD-2025-22133

Malicious code in bioql PyPI...

EUVD-2025-22635

Malicious code in bioql PyPI...

EUVD-2022-55453

Malicious code in bioql PyPI...

EUVD-2025-28032

Malicious code in bioql PyPI...

EUVD-2022-43590

Malicious code in bioql PyPI...

EUVD-2022-37007

Malicious code in bioql PyPI...

EUVD-2022-37796

Malicious code in bioql PyPI...

EUVD-2022-26899

Malicious code in bioql PyPI...

EUVD-2025-20039

Malicious code in bioql PyPI...

EUVD-2022-49670

Malicious code in bioql PyPI...

Malicious code in lc-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a284de978132b8c4d648fba52f9b1c5393d9988773103c1d56302dfe19cacf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unmasking Puppeteers: Leveraging Biometric Leakage to Disarm Impersonation in AI-Based Videoconferencing

AI-based talking-head videoconferencing systems reduce bandwidth by sending a compact pose-expression latent and re-synthesizing RGB at the receiver, but this latent can be puppeteered, letting an attacker hijack a victim's likeness in real time. Because every frame is synthetic, deepfake and...

Malicious code in @peterwiener/l (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 951ad8532d62f01f70b12691dd0d29e381cbee9f8848da6351d52ea2fc54b3a9 The OpenSSF Package Analysis project identified '@peterwiener/l' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by a potential denial of service attack due to Apache Thrift

Summary Apache Thrift is used by IBM Operations Analytics - Log Analysis as part of the Remote Procedure Call interface in Apache Solr. CVE-2020-13949 Vulnerability Details CVEID:CVE-2020-13949 DESCRIPTION: In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which...