EUVD-2024-32091

Malicious code in bioql PyPI...

EUVD-2024-27203

Malicious code in bioql PyPI...

EUVD-2021-32449

Malicious code in bioql PyPI...

EUVD-2023-47094

Malicious code in bioql PyPI...

EUVD-2022-15690

Malicious code in bioql PyPI...

EUVD-2022-15757

Malicious code in bioql PyPI...

EUVD-2021-31869

Malicious code in bioql PyPI...

EUVD-2021-32970

Malicious code in bioql PyPI...

EUVD-2023-46941

Malicious code in bioql PyPI...

EUVD-2024-47902

Malicious code in bioql PyPI...

Malicious Package

Overview jfrog-alfheim is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in jfrog-alfheim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42150 Malicious code in jfrog-alfheim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jfrog-asgard (npm)

The package jfrog-asgard was found to contain malicious code...

Malicious code in jfrog-midgard (npm)

The package jfrog-midgard was found to contain malicious code...

MAL-2025-23782 Malicious code in jfrog-midgard (npm)

The package jfrog-midgard was found to contain malicious code...

MAL-2025-23781 Malicious code in jfrog-asgard (npm)

The package jfrog-asgard was found to contain malicious code...

CVE-2024-3505

JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration. This does not affect JFrog cloud deployments...

CVE-2024-2248

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 SaaS and 7.84.7 Self-Hosted may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email...

CVE-2023-42508

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body...