EUVD-2025-30250

Malicious code in bioql PyPI...

EUVD-2023-35393

Malicious code in bioql PyPI...

Malicious code in mockup-device-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d724d8a07d3f57cfb72aa477d20c02f9b470a7ce9bb8ce5e5cd2895cd50b15e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-device-mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3997abd64511ef67ce5f8919344944698de3d8c04b73dee971d3ce6b3023493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-34210

The CVE concerns Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SAAS deployments). The connected sources confirm that sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) are stored in cleartext files that are ...

CVE-2025-34210 Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments store a large number of sensitive credentials database passwords, MySQL root password, SaaS keys, Portainer admin password, etc. in cleartext files that are world-readable. Any local user - or any proces...

Malicious code in pkgutil-resolve-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355bf6f2e2ca64d826a7a85321bd48180e7683107611ff321101c5baf3b26e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47880 Malicious code in blockscout-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df96f7696839c4588380c2ac801ba26b9a18c28692bfcc3aaabf0e05edd9b8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47884 Malicious code in cryptonote-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e46ce76ad9b7ee6d4bae5c3df244aa971d9cff8544866bbc48c06f4d0231fd20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongodb-cd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca26d806cc353b32de962af56707e9435a91852aaaab1fcc6e71b7a9d0fdd268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-chunk (npm)

The package vite-plugin-chunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e870026da8fa5893d57ae270527d5bb4d1eb31ee085d5a9f9e14c96c504a2fc7 Any computer that has this package installed or running should be considered fully...

Malicious code in node-notifications (npm)

The package node-notifications was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f537b45789bd1ad6fcec083716172d0230b37e04510ace80351a35ef51cf0a9 Any computer that has this package installed or running should be considered fully...

MAL-2025-47829 Malicious code in node-notifications (npm)

The package node-notifications was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f537b45789bd1ad6fcec083716172d0230b37e04510ace80351a35ef51cf0a9 Any computer that has this package installed or running should be considered fully...

Malicious code in react-repack (npm)

The package react-repack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038fe89fdf3f2220fd47dd19c5464b9fcc0b3f60c5ad14ed468d2d1da9909de1 Any computer that has this package installed or running should be considered fully...

MAL-2025-47832 Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

MAL-2025-47827 Malicious code in mongodb-ci (npm)

The package mongodb-ci was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9b911aab71cd920347a53724f3e83adcf499a82d3c5ae4a096bd972282ef97b Any computer that has this package installed or running should be considered fully compromise...

MAL-2025-47833 Malicious code in react-lovable (npm)

The package react-lovable was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c792d58d6efcc096647d6997590af53728e09a15a04d0a88839966aba1271f9b Any computer that has this package installed or running should be considered fully...

Malicious code in react-lovable (npm)

The package react-lovable was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c792d58d6efcc096647d6997590af53728e09a15a04d0a88839966aba1271f9b Any computer that has this package installed or running should be considered fully...

MAL-2025-47537 Malicious code in @sev-ui-verse/form-validators (npm)

The package @sev-ui-verse/form-validators was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e39d6023f97017127467f853ed7318cce2e7944403638addb101c98a68f52590 Any computer that has this package installed or running should be consider...