EUVD-2025-19605

Malicious code in bioql PyPI...

EUVD-2025-19621

Malicious code in bioql PyPI...

PT-2025-40414

Name of the Vulnerable Software and Affected Versions Flock Safety Falcon and Sparrow License Plate Readers version OPM1.171019.026 Description The devices ship with development Wi-Fi credentials specifically, test flck stored in cleartext within the production firmware. This could allow...

CVE-2025-59406: Cleartext Transmission of Sensitive Information

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

CVE-2025-59407: Use of Hard-coded Cryptographic Key

The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices bundles a Java Keystore flockrye.bks along with its hardcoded password flockhibiki17 in its code. The keysto...

CVE-2025-59409: Cleartext Storage of Sensitive Information

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials testflck stored in cleartext in production firmware...

Flock Safety Falcon security vulnerabilities

Flock Safety Falcon is a series of license plate recognition cameras from Flock Safety USA. A security vulnerability exists in Flock Safety Falcon that stems from the storage of plaintext exploitation Wi-Fi credentials in the production firmware...

Malicious Package

Overview falcon-login is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in falcon-login

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47215 Malicious code in @crowdstrike/falcon-shoelace (npm)

postinstall script executes bundle.js. bundle.js triggers unsignedbitwisemathexcess YARA rule. Suspicious behavior indicates malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 035c35169c1f3c6c939e3237ce0bb606645b05601db61892b5d54cbeea095b57 Any computer that h...

Malware in @crowdstrike/falcon-shoelace

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in falcon-login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99ae21b50a32d57d9c469d91755ecfa18484d7b95f0b61ccbefdf9dbcc1764e Any computer that has this package installed or running should be considered...

MAL-2025-47117 Malicious code in falcon-login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99ae21b50a32d57d9c469d91755ecfa18484d7b95f0b61ccbefdf9dbcc1764e Any computer that has this package installed or running should be considered...

Malicious code in falcon-topaz-aes130-project (npm)

The package falcon-topaz-aes130-project was found to contain malicious code...

Malicious code in falcon-uranium-xyf246-project (npm)

The package falcon-uranium-xyf246-project was found to contain malicious code...

Malicious code in falcon-xerus-nvx836-project (npm)

The package falcon-xerus-nvx836-project was found to contain malicious code...

MAL-2025-44227 Malicious code in falcon-uranium-xyf246-project (npm)

The package falcon-uranium-xyf246-project was found to contain malicious code...

MAL-2025-44228 Malicious code in falcon-xerus-nvx836-project (npm)

The package falcon-xerus-nvx836-project was found to contain malicious code...

MAL-2025-44226 Malicious code in falcon-topaz-aes130-project (npm)

The package falcon-topaz-aes130-project was found to contain malicious code...

A Survey of Post-Quantum Cryptography Support in Cryptographic Libraries

The rapid advancement of quantum computing poses a significant threat to modern cryptographic systems, necessitating the transition to Post-Quantum Cryptography PQC. This study evaluates the support for PQC algorithms within nine widely used open-source cryptographic libraries -- OpenSSL, wolfSSL...