MAL-2025-191354 Malicious code in @voiceflow/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8694ddb108f95b95b2ab31e65a4ff5ec96ff47c5acbbdbec749b7319fe58e3bc The package @voiceflow/logger was found to contain malicious code. Source: ghsa-malware...

Updated ruby-rack packages fix security vulnerabilities

Possible Log Injection in Rack::CommonLogger. CVE-2025-25184 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection. CVE-2025-27111 Local File Inclusion in Rack::Static. CVE-2025-27610...

axios-basic-logger (=1.0.0), react-micromodal.js (=1.0.0) potentially affected by unknown CVE via pico-uid (=1.0.2)

pico-uid NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pico-uid and may be impacted: - axios-basic-logger =1.0.0 - react-micromodal.js =1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-PICOUID-14103684...

Malicious Package

Overview servicecore-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

METZ CONNECT多款产品 访问控制错误漏洞

METZ CONNECT Energy-Controlling EWIO2-M and others are products of METZ CONNECT, Germany.METZ CONNECT Energy-Controlling EWIO2-M is a high performance data logger.METZ CONNECT Energy- Controlling EWIO2-M-BM is a high performance data logger.METZ CONNECT Ethernet-IO EWIO2-BM is a sensor and actuat...

Malicious code in ancestry-unified-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654a8c92f4dee2f432b77c84c15e3926d913e506e58375a0958c08cc53ff134b The package ancestry-unified-logger was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190549 Malicious code in ancestry-unified-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654a8c92f4dee2f432b77c84c15e3926d913e506e58375a0958c08cc53ff134b The package ancestry-unified-logger was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-197876

Malicious code in ancestry-unified-logger npm...

Path Traversal

mllogger is vulnerable to path traversal. the vulnerability is due to manipulation of the File argument in the loghandler function of mllogger/server.py, which allows an attacker to perform path traversal to read, create, or overwrite files remotely...

EUVD-2025-38396

Malicious code in servicecore-logger npm...

MAL-2025-49434 Malicious code in servicecore-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67358a5e26b15490ada3fa1cfa427c857adafe5a9c9190e1a8f3f5b1f02dff6e The package servicecore-logger was found to contain malicious code. Source: ghsa-malware...

Malicious code in servicecore-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67358a5e26b15490ada3fa1cfa427c857adafe5a9c9190e1a8f3f5b1f02dff6e The package servicecore-logger was found to contain malicious code. Source: ghsa-malware...

[SECURITY] Fedora 42 Update: dtklog-0.0.2-8.fc42

Simple, convenient and thread safe logger for Qt-based C++ apps...

Malicious code in @qwant-internal/datahub-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71173ddf94db9194dbde8c27f8d6abad60f54b610533b5d69c1a89d2c002d391 The package @qwant-internal/datahub-logger was found to contain malicious code...

MAL-2025-49279 Malicious code in @qwant-internal/datahub-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71173ddf94db9194dbde8c27f8d6abad60f54b610533b5d69c1a89d2c002d391 The package @qwant-internal/datahub-logger was found to contain malicious code...

EUVD-2025-37285

Malicious code in @qwant-internal/datahub-logger npm...

CVE-2025-61120

AG Life Logger Android App version v1.0.2.72 and before package name com.donki.healthy, developed by IO FIT, K.K., contains improper access control vulnerabilities. Exposed credentials in traffic may allow attackers to misuse cloud resources, and predictable verification codes make brute-force...

[SECURITY] Fedora 42 Update: dtk6log-0.0.2-13.fc42

Simple, convenient and thread safe logger for Qt-based C++ apps...

PT-2025-44430

Name of the Vulnerable Software and Affected Versions AG Life Logger versions prior to v1.0.2.72 Description The AG Life Logger Android App has issues with access control. Exposed credentials in network traffic could allow misuse of cloud resources. Predictable verification codes enable potential...

CVE-2025-61120

AG Life Logger Android App (v1.0.2.72 and earlier; package com.donki.healthy) by IO FIT, K.K. has an improper access control vulnerability. Traffic contains credentials exposed in transit, which may allow misuse of cloud resources. Additionally, a predictable verification code mechanism enables b...