EUVD-2025-31771

Malicious code in bioql PyPI...

EUVD-2023-55152

Malicious code in bioql PyPI...

EUVD-2025-27479

Malicious code in bioql PyPI...

EUVD-2024-2858

Malicious code in bioql PyPI...

EUVD-2025-0208

Malicious code in bioql PyPI...

Malicious code in react-device-mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3997abd64511ef67ce5f8919344944698de3d8c04b73dee971d3ce6b3023493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47903 Malicious code in mockup-plugin-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558235acfe4f70dc63b4fc13a84d52053efc759496cd14e3be1174f7ae4ee3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typing-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9c677715e7d6777e0959af0efc0bdc272553cd5e6fe9a72febb54c080a10ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47882 Malicious code in com.unity.2d.pixel-perfect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a67e51f9589346d26c184ae8ec584a2a6433b25cfb0189e71ba2ffad5f11d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47888 Malicious code in lovable-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d5b437f91405ceb1fe18cde50960c5b8ad03910dede2cbdd179627eed2d82e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47870 Malicious code in vite-plugin-parse-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c3c9412f03ac4be0712f183133c219efac17d93edf28bf821d9dae53b7856e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

MAL-2025-47831 Malicious code in notificationalerts (npm)

The package notificationalerts was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1205ef89ec9b8ec887a5a8e4d166be6421e33f4d61a691c4bd2e7000ee5c14 Any computer that has this package installed or running should be considered fully...

MAL-2025-47829 Malicious code in node-notifications (npm)

The package node-notifications was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f537b45789bd1ad6fcec083716172d0230b37e04510ace80351a35ef51cf0a9 Any computer that has this package installed or running should be considered fully...

MAL-2025-47830 Malicious code in nodeapi-json (npm)

The package nodeapi-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adf38cc7ff9fedd8e0e5018c03c9141360823a8c5143181264185160ee040728 Any computer that has this package installed or running should be considered fully...

PYSEC-2025-204

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

AZL-68120 CVE-2025-55552 affecting package pytorch for versions less than 2.0.0-11

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

AZL-68103 CVE-2025-55552 affecting package pytorch for versions less than 2.2.2-9

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

MAL-2025-47570 Malicious code in vite-plugin-optichunk (npm)

The package vite-plugin-optichunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6397b10743e7db5e33165e9561210449ade8c6671259d396b92d6c5bc9becb49 Any computer that has this package installed or running should be considered fully...