EUVD-2025-26630

Malicious code in bioql PyPI...

EUVD-2022-39503

Malicious code in bioql PyPI...

EUVD-2023-59080

Malicious code in bioql PyPI...

EUVD-2024-16931

Malicious code in bioql PyPI...

EUVD-2022-50287

Malicious code in bioql PyPI...

EUVD-2025-8456

Malicious code in bioql PyPI...

EUVD-2023-53742

Malicious code in bioql PyPI...

EUVD-2025-1598

Malicious code in bioql PyPI...

EUVD-2024-17493

Malicious code in bioql PyPI...

EUVD-2024-51405

Malicious code in bioql PyPI...

EUVD-2025-26572

Malicious code in bioql PyPI...

Great Scott, I’m tired

Welcome to this week's edition of the Threat Source newsletter. "Back to the Future" is 40 years old this year, and at the risk of giving away sensitive information to an audience of hackers… so am I. I don't really know what 40 is supposed to feel like. Honestly, I don't feel all that different...

HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks

Chinese-speaking users are the target of a search engine optimization SEO poisoning campaign that uses fake software sites to distribute malware. "The attackers manipulated search rankings with SEO plugins and registered lookalike domains that closely mimicked legitimate software sites," Fortinet...

Malicious code in fox-lava-ikx852-project (npm)

The package fox-lava-ikx852-project was found to contain malicious code...

MAL-2025-44295 Malicious code in fox-lava-ikx852-project (npm)

The package fox-lava-ikx852-project was found to contain malicious code...

CVE-2025-58593

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...

CVE-2025-58593

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...

WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.0...

CVE-2025-58593 WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...

CVE-2025-58593 WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Stored XSS.This issue affects Orbit Fox by ThemeIsle: from n/a through = 3.0.0...