303 matches found
EUVD-2026-28922
Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.25.0, the HTTP login endpoints POST /login and POST /signalk/v1/auth/login are protected by express-rate-limit default: 100 attempts per 10-minute window, configurable via HTTPRATELIMITS. The WebSocke...
MAL-2026-3191 Malicious code in rblx-https (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4b7d7435a6bcfd1a9437108a21af9ca6be7c60aa1e0c6e9e90a40ac43b26cf67 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...
EUVD-2026-18396
Signal K Server: Arbitrary Prototype Read via from Field Bypass...
Malicious code in mipta190-boat-composed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f59c1abff1d4fc7c38359cc009956e16e15e50b142e4f4ddefc1ad35a85719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2010-2691
Malware in sbrugna...
EUVD-2012-5102
Malware in sbrugna...
EUVD-2014-4883
Malware in sbrugna...
EUVD-2025-9578
Malicious code in bioql PyPI...
EUVD-2023-23322
Malicious code in bioql PyPI...
EUVD-2024-32943
Malicious code in bioql PyPI...
EUVD-2024-32946
Malicious code in bioql PyPI...
EUVD-2024-32942
Malicious code in bioql PyPI...
EUVD-2024-32939
Malicious code in bioql PyPI...
EUVD-2024-32940
Malicious code in bioql PyPI...
EUVD-2024-32947
Malicious code in bioql PyPI...
EUVD-2025-14992
Malicious code in bioql PyPI...
EUVD-2024-32941
Malicious code in bioql PyPI...
EUVD-2024-32948
Malicious code in bioql PyPI...