626 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
AI teddy bear for kids responds with sexual content and advice about weapons
In testing, FoloToy’s AI teddy bear jumped from friendly chat to sexual topics and unsafe household advice. It shows how easily artificial intelligence can cross serious boundaries. It’s a fair moment to ask whether AI-powered stuffed animals are appropriate for children. It’s easy to get swept u...
Malicious Package
Overview bcryptjs-node-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview flowtype-errors is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview annotate-pure-calls is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
GHSA-WMWF-9CCG-FFF5 Apache Tomcat Vulnerable to Relative Path Traversal
The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the...
Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library
Summary A bypass vulnerability where, despite CVE-2024-38820 ensuring Locale-independent lowercase conversion for disallowedFields patterns and request parameter names, there are still cases where it is possible to bypass the disallowedFields checks . Vulnerability Details CVEID:CVE-2025-22233...
EUVD-2021-0458
Malware in sbrugna...
EUVD-2020-28341
Malware in sbrugna...
EUVD-2014-5860
Malware in sbrugna...
EUVD-2021-0140
Malware in sbrugna...
EUVD-2025-4651
Malicious code in bioql PyPI...
EUVD-2024-46244
Malicious code in bioql PyPI...
EUVD-2023-29129
Malicious code in bioql PyPI...
EUVD-2024-52311
Malicious code in bioql PyPI...
EUVD-2023-32296
Malicious code in bioql PyPI...
EUVD-2024-0975
Malicious code in bioql PyPI...
EUVD-2025-0104
Malicious code in bioql PyPI...