EUVD-2023-0816

Malicious code in bioql PyPI...

EUVD-2022-27301

Malicious code in bioql PyPI...

EUVD-2024-32782

Malicious code in bioql PyPI...

EUVD-2025-24288

Malicious code in bioql PyPI...

EUVD-2023-54552

Malicious code in bioql PyPI...

EUVD-2023-23392

Malicious code in bioql PyPI...

EUVD-2025-20616

Malicious code in bioql PyPI...

EUVD-2021-9600

Malicious code in bioql PyPI...

EUVD-2023-42319

Malicious code in bioql PyPI...

EUVD-2025-27336

Malicious code in bioql PyPI...

EUVD-2021-9531

Malicious code in bioql PyPI...

EUVD-2025-29906

Malicious code in bioql PyPI...

EUVD-2023-3215

Malicious code in bioql PyPI...

EUVD-2021-30019

Malicious code in bioql PyPI...

CVE-2025-49090: External Control of Critical State Data

The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...

Malicious code in giffgaff-status (npm)

The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter via the V8 process. An attacker can cause heap corruption by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.207 or higher...

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter via the V8 process. An attacker can cause heap corruption by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.207 or higher...

Malicious code in fast-httpx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43be59be9c0005970f6a8a0cb80767f019ee690c675e81e7a40ed5672a175d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47470 Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...