EUVD-2024-31643

Malicious code in bioql PyPI...

EUVD-2025-11797

Malicious code in bioql PyPI...

EUVD-2022-4568

Malicious code in bioql PyPI...

EUVD-2025-4201

Malicious code in bioql PyPI...

EUVD-2022-45061

Malicious code in bioql PyPI...

EUVD-2024-30280

Malicious code in bioql PyPI...

EUVD-2017-0072

Malicious code in bioql PyPI...

EUVD-2022-4484

Malicious code in bioql PyPI...

EUVD-2024-46965

Malicious code in bioql PyPI...

EUVD-2021-28054

Malicious code in bioql PyPI...

EUVD-2024-47501

Malicious code in bioql PyPI...

EUVD-2024-46964

Malicious code in bioql PyPI...

EUVD-2022-49076

Malicious code in bioql PyPI...

EUVD-2024-29054

Malicious code in bioql PyPI...

EUVD-2022-3896

Malicious code in bioql PyPI...

EUVD-2022-3461

Malicious code in bioql PyPI...

NewStart CGSL MAIN 6.06 : system-config-printer Vulnerability (NS-SA-2025-0233)

The remote NewStart CGSL host, running version MAIN 6.06, has system-config-printer packages installed that are affected by a vulnerability: - The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an insecure...

Ensure That GPG Verification Is Configured for the Yum Repositories

Software packages may be tampered with by attackers during network transmission or local storage. If the integrity verification is not performed on the software packages, software tampered with by attackers may be installed. As a result, the server or even the entire network cluster is attacked. ...

Widespread Supply Chain Compromise Impacting npm Ecosystem

CISA is releasing this Alert to provide guidance in response to a widespread software supply chain compromise involving the world’s largest JavaScript registry, npmjs.com. A self-replicating worm—publicly known as “Shai-Hulud”—has compromised over 500 packages.i After gaining initial access, the...

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

LastPass is warning of an ongoing, widespread information stealer campaign targeting Apple macOS users through fake GitHub repositories that distribute malware-laced programs masquerading as legitimate tools. "In the case of LastPass, the fraudulent repositories redirected potential victims to a...