EUVD-2021-1914

Malware in sbrugna...

EUVD-2013-3687

Malware in sbrugna...

EUVD-2000-0997

Malware in sbrugna...

EUVD-2021-17653

Malware in sbrugna...

EUVD-2018-8037

Malware in sbrugna...

EUVD-2017-1529

Malware in sbrugna...

EUVD-1999-0140

Malware in sbrugna...

EUVD-2000-0986

Malware in sbrugna...

EUVD-2016-6389

Malware in sbrugna...

EUVD-2016-4477

Malware in sbrugna...

EUVD-2016-2134

Malware in sbrugna...

EUVD-1999-0390

Malware in sbrugna...

EUVD-1999-0377

Malware in sbrugna...

EUVD-2003-0083

Malware in sbrugna...

EUVD-1999-1498

Malware in sbrugna...

Malicious code in eslint-plugin-paysafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeeb3008c1c25d409de0b1ddd06dec1567d3ddb75c311c718aeafd606e5f24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47936 Malicious code in zdachboostv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-logger-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5c4b995fe69e4aa74c03000fd07f0d610f634bc937efe85b509242671234eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-32855

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

PT-2025-41008

Name of the Vulnerable Software and Affected Versions CubeAPM version nightly-2025-08-01-1 Description The software allows unauthenticated attackers to inject arbitrary log entries into production systems. This is possible through the /api/logs/insert/elasticsearch/ bulk API endpoint, which accep...