EUVD-2025-19636

Malicious code in bioql PyPI...

EUVD-2025-21537

Malicious code in bioql PyPI...

EUVD-2025-12223

Malicious code in bioql PyPI...

EUVD-2024-34408

Malicious code in bioql PyPI...

EUVD-2021-7539

Malicious code in bioql PyPI...

EUVD-2025-7453

Malicious code in bioql PyPI...

EUVD-2024-3532

Malicious code in bioql PyPI...

EUVD-2023-31740

Malicious code in bioql PyPI...

EUVD-2025-19964

Malicious code in bioql PyPI...

EUVD-2024-54055

Malicious code in bioql PyPI...

security-analytics

This repository is a community-driven set of security analytics for auditing cloud usage and detecting threats to data & workloads in Google Cloud. It provides a list of sample security analytics for auditing cloud usage and detecting threats, which may assist detection engineers, threat hunters,...

Malicious Package

Overview enumer-iam is a malicious package. This package contains malicious code disguised as a legitimate cloud client utility, and its content has been removed from the official package manager. Its primary purpose is to steal cloud-related secrets, such as API keys and access tokens. The packa...

Linux Distros Unpatched Vulnerability : CVE-2015-1426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node...

Malicious code in aws-async-iam (npm)

The package aws-async-iam was found to contain malicious code...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (1.0.1-alpha.1)

h1-cli-ext-iam-project-select NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...

MAL-2025-15223 Malicious code in aws-async-iam (npm)

The package aws-async-iam was found to contain malicious code...

Malicious code in h1-cli-ext-iam-project-select (npm)

The package h1-cli-ext-iam-project-select was found to contain malicious code...

MAL-2025-22079 Malicious code in h1-cli-ext-iam-project-select (npm)

The package h1-cli-ext-iam-project-select was found to contain malicious code...

CVE-2025-54876

The Janssen Project is an open-source identity and access management IAM platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local clicmd.log file. This is fixed in the nightly prerelease...

CVE-2025-54876: Insufficiently Protected Credentials

The Janssen Project is an open-source identity and access management IAM platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local clicmd.log file. This is fixed in the nightly prerelease...