MAL-2025-48733 Malicious code in ldhpgemrdhs95005 (npm)

The package ldhpgemrdhs95005 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: inih-62-1.fc41

The inih package provides simple INI file parser which is only a couple of pages of code, and it was designed to be small and simple, so it's good for embedded systems...

MAL-2025-48482 Malicious code in aptos-protos (npm)

The package aptos-protos was found to contain malicious code...

CVE-2025-59889

Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center...

MAL-2025-48507 Malicious code in spot-electron-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

EUVD-2020-30055

Malware in sbrugna...

EUVD-2020-26478

Malware in sbrugna...

EUVD-2020-12660

Malware in sbrugna...

MAL-2025-48358 Malicious code in codat-snippets (npm)

The package communicates with a domain associated with malicious activity...

EUVD-2025-32174

Malicious code in bioql PyPI...

EUVD-2023-2296

Malicious code in bioql PyPI...

EUVD-2022-0445

Malicious code in bioql PyPI...

EUVD-2025-31020

Malicious code in bioql PyPI...

EUVD-2024-2148

Malicious code in bioql PyPI...

EUVD-2025-29854

Malicious code in bioql PyPI...

Malicious code in tikweb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 56e420aab6cf451bf10ab865d2950af02e45914f0a7618355f7ee8384ddcd858 This malicious package claims to interact with TikTok web features programmatically, but runs malicious obfuscated code upon import and via other...

MAL-2025-47630 Malicious code in com.unity.gis.high-precision-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an inf...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

MAL-2025-47579 Malicious code in altoqitec-login-integrado-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36e8fa2ecf486300b0bbfb8d83e585407f8717849e9e2b0c12da3147caca1d87 The OpenSSF Package Analysis project identified...