29363 matches found
Malicious code in @pcxm/gasket-single-spa (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...
MAL-2025-48385 Malicious code in nilepkg5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Phishers target 1Password users with convincing fake breach alert
In a very recent and well-targeted phishing attempt, scammers tried to get hold of the 1Password credentials belonging to a Malwarebytes’ employee. Stealing someone’s 1Password login would be like hitting the jackpot for cybercriminals, because they potentially export all the saved logins the...
DEBIAN-CVE-2025-61765
python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...
CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...
CVE-2025-61765
CVE-2025-61765 affects the Python Socket.IO implementation (python-socketio) used for real-time client/server communications. The root cause is unsafe deserialization of messages via Python’s pickle.loads() when inter-server messaging uses a backend message queue (e.g., Redis). In multi-server de...
CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...
MAL-2025-48084 Malicious code in vn-hrm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7e7500ba0af4e9b2c0354a3820e7c28cc50ed3e9092db9e4c3c3cba3958234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47990 Malicious code in e2e-test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c8d68688f22fea09a5713fa230e86e17ec757b0ab4f80311cbc5312fd0cbf0 Any computer that has this package installed or running should be considered...
MAL-2025-48006 Malicious code in toskasldfjaldf-parser (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e759a5c9e8da467a90adc10a682a68df15a878213a5e38a2a5dad06f95740103 Any computer that has this package installed or running should be considered...
MAL-2025-48011 Malicious code in vishu_transitive_fn (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f90df0189636fa1988950e054ba609b79142c54a65e9cf18806db68cebf5d3 Any computer that has this package installed or running should be considered...
EUVD-2025-30259
Malicious code in bioql PyPI...
EUVD-2025-24802
Malicious code in bioql PyPI...
EUVD-2025-23660
Malicious code in bioql PyPI...
EUVD-2025-26663
Malicious code in bioql PyPI...
EUVD-2023-24775
Malicious code in bioql PyPI...
EUVD-2024-25121
Malicious code in bioql PyPI...
EUVD-2025-24207
Malicious code in bioql PyPI...