EUVD-2020-0610

Malware in sbrugna...

EUVD-2023-2773

Malicious code in bioql PyPI...

EUVD-2024-2771

Malicious code in bioql PyPI...

EUVD-2024-2887

Malicious code in bioql PyPI...

EUVD-2023-0343

Malicious code in bioql PyPI...

EUVD-2023-0493

Malicious code in bioql PyPI...

EUVD-2022-32825

Malicious code in bioql PyPI...

EUVD-2024-2612

Malicious code in bioql PyPI...

EUVD-2023-34357

Malicious code in bioql PyPI...

EUVD-2025-26657

Malicious code in bioql PyPI...

Arbitrary File Creation

github.com/charmbracelet/soft-serve is vulnerable to Arbitrary file creation. The vulnerability is due to uncontrolled data being written through its SSH API, which allows an attacker to create or override arbitrary files...

Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview webpack-serve-middleware is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-47508 Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-58355

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...

GO-2025-3930 Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve...

PT-2025-36651

Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve...

CVE-2025-58355

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...

CVE-2025-58355

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the commitCommand function. An attacker can create or overwrite arbitrary files by sending specially crafted requests through the SSH interface. Note: This vulnerability was fixed in version...