EUVD-2024-54464

Malicious code in bioql PyPI...

EUVD-2025-25471

Malicious code in bioql PyPI...

EUVD-2023-0291

Malicious code in bioql PyPI...

Product Walkthrough: How Passwork 7 Addresses Complexity of Enterprise Security

Passwork is positioned as an on-premises unified platform for both password and secrets management, aiming to address the increasing complexity of credential storage and sharing in modern organizations. The platform recently received a major update that reworks all the core mechanics. Passwork 7...

You Didn't Get Phished — You Onboarded the Attacker

When Attackers Get Hired: Today's New Identity Crisis What if the star engineer you just hired isn't actually an employee, but an attacker in disguise? This isn't phishing; it's infiltration by onboarding. Meet "Jordan from Colorado," who has a strong resume, convincing references, a clean...

CVE-2025-52351

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activation URL e.g., https://domain.com/activate=xyz. This practice can result in password exposure via...

CVE-2025-52351

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activation URL e.g., https://domain.com/activate=xyz. This practice can result in password exposure via...

CVE-2025-52351

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activation URL e.g., https://domain.com/activate=xyz. This practice can result in password exposure via...

PT-2025-34264 · Unknown · Aikaan Iot Management Platform

Name of the Vulnerable Software and Affected Versions: Aikaan IoT management platform version 3.25.0325-5-g2e9c59796 Description: The Aikaan IoT management platform sends newly generated passwords to users in plaintext via email. The same password is also included as a query parameter in the...

CVE-2025-52351

CVE-2025-52351 affects Aikaan IoT management platform v3.25.0325-5-g2e9c59796. The vulnerability arises from sending a newly generated password to users in plaintext via email and including the same password as a query parameter in the account activation URL (e.g., https://domain.com/activate=xyz...

Malicious code in dusthelpers-onboarding (npm)

The package dusthelpers-onboarding was found to contain malicious code...

Malicious code in opent2t-onboarding-huehub (npm)

The package opent2t-onboarding-huehub was found to contain malicious code...

MAL-2025-28337 Malicious code in opent2t-onboarding-org-opent2t-onboarding-hue (npm)

The package opent2t-onboarding-org-opent2t-onboarding-hue was found to contain malicious code...

Malicious code in opent2t-onboarding-org-opent2t-onboarding-hue (npm)

The package opent2t-onboarding-org-opent2t-onboarding-hue was found to contain malicious code...

MAL-2025-18998 Malicious code in dusthelpers-onboarding (npm)

The package dusthelpers-onboarding was found to contain malicious code...

MAL-2025-28336 Malicious code in opent2t-onboarding-huehub (npm)

The package opent2t-onboarding-huehub was found to contain malicious code...

Malicious code in onboarding-lemonde (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Simplify Onboarding With Hospitality Training Software

Effective onboarding is essential in fast-paced hospitality, with high turnover rates and a multitude of expectations as the…...

MAL-2025-4949 Malicious code in ls-onboarding-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db473564b7a21b15dbe15dd67ba5ff1551000c7cef010286303eaeb5ecebfc68 Any computer that has this package installed or running should be considered...

Malicious code in ls-onboarding-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db473564b7a21b15dbe15dd67ba5ff1551000c7cef010286303eaeb5ecebfc68 Any computer that has this package installed or running should be considered...