EUVD-2023-32715

Malicious code in bioql PyPI...

EUVD-2025-21670

Malicious code in bioql PyPI...

EUVD-2025-10288

Malicious code in bioql PyPI...

EUVD-2024-35299

Malicious code in bioql PyPI...

EUVD-2022-4599

Malicious code in bioql PyPI...

EUVD-2022-4761

Malicious code in bioql PyPI...

EUVD-2023-52742

Malicious code in bioql PyPI...

EUVD-2023-42152

Malicious code in bioql PyPI...

EUVD-2025-10264

Malicious code in bioql PyPI...

EUVD-2025-3471

Malicious code in bioql PyPI...

EUVD-2025-19560

Malicious code in bioql PyPI...

EUVD-2024-53297

Malicious code in bioql PyPI...

EUVD-2023-2320

Malicious code in bioql PyPI...

EUVD-2025-27429

Malicious code in bioql PyPI...

EUVD-2022-15351

Malicious code in bioql PyPI...

CVE-2025-11135: Deserialization of Untrusted Data

A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulation of the argument userid results in...

MAL-2025-47499 Malicious code in tailwind-classes-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533ded19e56068694976a22ebcd933310fdb82d4b79857298b09a3f5e30389b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-classes-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533ded19e56068694976a22ebcd933310fdb82d4b79857298b09a3f5e30389b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tailwind-classes-overrides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-59717

In the @digitalocean/do-markdownit package through 1.16.1 in npm, the callout and fenceenvironment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string instead of an array...