EUVD-2021-22598

Malware in sbrugna...

EUVD-2018-1453

Malware in sbrugna...

EUVD-2020-30125

Malware in sbrugna...

EUVD-2005-3810

Malware in sbrugna...

EUVD-2021-22596

Malware in sbrugna...

EUVD-2008-5145

Malware in sbrugna...

EUVD-2005-3935

Malware in sbrugna...

EUVD-2005-3936

Malware in sbrugna...

EUVD-2009-3001

Malware in sbrugna...

EUVD-2021-22600

Malware in sbrugna...

EUVD-2009-2907

Malware in sbrugna...

EUVD-2025-2138

Malicious code in bioql PyPI...

EUVD-2024-49286

Malicious code in bioql PyPI...

EUVD-2025-2137

Malicious code in bioql PyPI...

@orca-fe/datav-cli (>=2.8.3 <=2.9.4), @shuji-components/sjv-cli (=0.0.3) +4 more potentially affected by CVE-2025-57348 via node-cube (>=0.0.10 <=5.0.0-beta.28)

node-cube NPM version =0.0.10, =2.8.3, =0.0.1, =1.0.2, =1.0.0, =0.0.1, =1.0.9 Source cves: CVE-2025-57348 Source advisory: SNYK:JS-NODECUBE-13109830...

@orca-fe/datav-cli (>=2.8.3 <=2.9.4), datav-cli (>=0.0.1 <=2.12.3) +3 more potentially affected by CVE-2025-57348 via node-cube (>=0.0.10 <=5.0.0-beta.16)

node-cube NPM version =0.0.10, =2.8.3, =0.0.1, =1.0.2, =1.0.0, =0.0.1, =1.0.9 Source cves: CVE-2025-57348 Source advisory: OSV:GHSA-8V65-5FW5-23WJ...

Malicious code in github-orca (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83776c9c0b12c59a169cd0eb6d85e38ce8ae930d21f9d837edf0acd9e2bdccf1 The OpenSSF Package Analysis project identified 'github-orca' @ 0.0.20.1626.gb0c19ef3 rubygems as malicious. It is considered malicious because:...

MAL-2025-46910 Malicious code in github-orca (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83776c9c0b12c59a169cd0eb6d85e38ce8ae930d21f9d837edf0acd9e2bdccf1 The OpenSSF Package Analysis project identified 'github-orca' @ 0.0.20.1626.gb0c19ef3 rubygems as malicious. It is considered malicious because:...

CVE-2025-1388

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells...

CVE-2025-1389

Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents...