MAL-2025-4455 Malicious code in vnc-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b409d2b1ea3535147d71ddf23425fe3fe4d437ce0d5af96f32f80c094bccc009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory (FEDORA-2024-6b9aeecbe8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-24107

hourofcodepython2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package requirements.txt. This vulnerability allows attackers to access sensitive user information and execute arbitrary code...

MAL-2025-4373 Malicious code in mbm-dgacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584950211093c6cada6fd340d94a5749b3ee5e10049a6d57b9d3f1c494050fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4398 Malicious code in seacloud-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2727a30c94e296fcc61f82a43c5fb3d025fc2323aa7d99a8825994b2989bf2a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-40806

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-42040

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

MAL-2025-4198 Malicious code in t43est-hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4173 Malicious code in gatsby-theme-newrelic (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4155 Malicious code in @motortrend/sonic-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4150 Malicious code in @dailyapy-rn/rn-push-provisioning (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @character-tech/client-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4145 Malicious code in @bmwfedev/playwright-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pythonbinance (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4217 Malicious code in el1t3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

[ASA-202505-12] go: directory traversal

Arch Linux Security Advisory ASA-202505-12 ========================================== Severity: Low Date : 2025-05-19 CVE-ID : CVE-2025-22873 Package : go Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-2878 Summary ======= The package go before version 2:1.24.3-1...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1493)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4169-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in coloramapkgsdow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

python311-mechanize-0.4.10-1.4 on GA media (moderate)

python311-mechanize-0.4.10-1.4 on GA media Announcement ID: openSUSE-SU-2025:15098-1 Rating: moderate Cross-References: CVE-2021-32837 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...