9679 matches found
MAL-2025-47936 Malicious code in zdachboostv1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @winstan/binston (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a456158c683cc4e3bd977ec81310c39b3cf491b14458ed49766c0f58805cec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47921 Malicious code in @winstan/vinston (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 701c8532f7235adb3a68d19af65d9a7b583be566885ae32b443bb5789e58ec84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Amazon AWS VPN Client 安全漏洞
Amazon AWS VPN Client is a fully managed remote access VPN solution from Amazon.com, Inc. A security vulnerability exists in Amazon AWS VPN Client versions 1.3.2 through 5.2.0, which stems from insufficient validation of the log target directory during log rotation, and could lead to elevation of...
PT-2025-41169
Name of the Vulnerable Software and Affected Versions AWS VPN Client for macOS versions 1.3.2 through 5.2.0 Description A flaw exists in the AWS VPN Client for macOS that allows a local user to execute code with elevated privileges. Insufficient validation of the log destination directory during...
Malicious code in flight-suit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6d36537b116f54f862bfade62a56a5be6181faa17c245d41201c57b229ae4e Any computer that has this package installed or running should be considered...
MAL-2025-48290 Malicious code in @pcxm/gasket-single-spa (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
...
Malicious code in e2e-test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c8d68688f22fea09a5713fa230e86e17ec757b0ab4f80311cbc5312fd0cbf0 Any computer that has this package installed or running should be considered...
EUVD-2023-52805
Malicious code in bioql PyPI...
EUVD-2025-23966
Malicious code in bioql PyPI...
EUVD-2023-47232
Malicious code in bioql PyPI...
EUVD-2025-24776
Malicious code in bioql PyPI...
EUVD-2025-18421
Malicious code in bioql PyPI...
EUVD-2024-3483
Malicious code in bioql PyPI...
EUVD-2024-2012
Malicious code in bioql PyPI...
EUVD-2023-23900
Malicious code in bioql PyPI...
EUVD-2024-2712
Malicious code in bioql PyPI...