EUVD-2021-0530

Malware in sbrugna...

EUVD-2007-3832

Malware in sbrugna...

EUVD-2019-11570

Malware in sbrugna...

EUVD-2020-5109

Malware in sbrugna...

EUVD-2007-6388

Malware in sbrugna...

EUVD-2021-0626

Malware in sbrugna...

EUVD-2015-0250

Malicious code in bioql PyPI...

EUVD-2022-6434

Malicious code in bioql PyPI...

EUVD-2022-2257

Malicious code in bioql PyPI...

EUVD-2025-24619

Malicious code in bioql PyPI...

EUVD-2022-5610

Malicious code in bioql PyPI...

EUVD-2023-27697

Malicious code in bioql PyPI...

EUVD-2024-2956

Malicious code in bioql PyPI...

EUVD-2021-7368

Malicious code in bioql PyPI...

interactive-git-checkout has a Command Injection vulnerability

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Resources: Project'...

CVE-2025-54994

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...

CVE-2025-59046

The npm package "interactive-git-checkout" is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via "npm install -g interactive-git-checkout". Versions up to...

CVE-2025-59046: Improper Neutralization of Special Elements used in a Command

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...

GHSA-3CH2-JXXC-V4XF @akoskm/create-mcp-server-stdio is vulnerable to MCP Server Command Injection through `exec` API

Command Injection in MCP Server The MCP Server at https://github.com/akoskm/create-mcp-server-stdio is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. Vulnerable tool The MCP Server exposes the to...

CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...