95 matches found
Malicious code in apple-internal-pki-trust (npm)
Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...
MAL-2026-3151 Malicious code in apple-cloud-infrastructure-monitor (npm)
Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...
Fedora 44 : composer (2026-1140c02041)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1140c02041 advisory. Version 2.9.7 - 2026-04-14 Fixes regression calling custom script command aliases that are called a substring of a composer command 12802 ---- Versi...
Fedora 42 : composer (2026-d91f313a63)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91f313a63 advisory. Version 2.9.7 - 2026-04-14 Fixes regression calling custom script command aliases that are called a substring of a composer command 12802 ---- Versi...
GlassWorm attack installs fake browser extension for surveillance
GlassWorm hides inside developer tools. Once it's in, it steals data, installs remote access malware, and even a fake browser extension to monitor activity. While it starts with developers, the impact can quickly spread. With stolen credentials, access tokens, and compromised tools, attackers can...
Malicious code in remjsonparse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e478d1e016f1d6d6d1cb4a9d23ac45449c22d99aa8e71c88d2f38fae8951f23f During import, package starts advanced compromise actions: exfiltrates AWS and git credentials, commands history, security tools in use. After that, the code...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: dagdotdev, kepler, spire-controller-manager-fips, docker-credential-acr-env, local-path-provisioner-fips, conftest, prometheus-podman-exporter, render-template, tfsec, kubernetes-csi-livenessprobe-fips, dask-gateway, cyberark-secrets-provider-for-k8s-fips, dbmate,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: dagdotdev, kepler, spire-controller-manager-fips, docker-credential-acr-env, local-path-provisioner-fips, conftest, prometheus-podman-exporter, render-template, tfsec, kubernetes-csi-livenessprobe-fips, dask-gateway, cyberark-secrets-provider-for-k8s-fips, dbmate,...
EUVD-2017-0124
Malware in sbrugna...
EUVD-2023-1011
Malicious code in bioql PyPI...
EUVD-2022-4594
Malicious code in bioql PyPI...
EUVD-2023-0407
Malicious code in bioql PyPI...
EUVD-2024-0859
Malicious code in bioql PyPI...
EUVD-2025-19655
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-53103
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git...
Information Exposure
org.junit.platform, junit-platform-reporting is vulnerable to information exposure. The vulnerability is due to a flaw in the OpenTestReportGeneratingListener leaking Git credentials in generated Open Test Reporting XML files, which allows an attacker to steal exposed tokens from publicly...
SUSE CVE-2025-53103
JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...
GHSA-M43G-M425-P68X junit-platform-reporting can leak Git credentials through its OpenTestReportGeneratingListener
Summary This vulnerability affects JUnit's support for writing Open Test Reporting XML files which is an opt-in feature of junit-platform-reporting. If a repository is cloned using a GitHub token or other credentials in its URL, for example: bash git clone...
junit-platform-reporting can leak Git credentials through its OpenTestReportGeneratingListener
Summary This vulnerability affects JUnit's support for writing Open Test Reporting XML files which is an opt-in feature of junit-platform-reporting. If a repository is cloned using a GitHub token or other credentials in its URL, for example: bash git clone...
CVE-2025-53103
JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...