MAL-2025-17515 Malicious code in contentful-build-bot (npm)

The package contentful-build-bot was found to contain malicious code...

MAL-2025-16004 Malicious code in bot-methods (npm)

The package bot-methods was found to contain malicious code...

MAL-2025-21313 Malicious code in generator-watson-text-bot (npm)

The package generator-watson-text-bot was found to contain malicious code...

Malicious code in contentful-build-bot (npm)

The package contentful-build-bot was found to contain malicious code...

MAL-2025-21274 Malicious code in generator-bot-template-generator (npm)

The package generator-bot-template-generator was found to contain malicious code...

cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...

MAL-2025-20289 Malicious code in fca-bot-game (npm)

The package fca-bot-game was found to contain malicious code...

MAL-2025-14637 Malicious code in api-bot-basil (npm)

The package api-bot-basil was found to contain malicious code...

Malicious code in bot-creator (npm)

The package bot-creator was found to contain malicious code...

MAL-2025-19121 Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

MAL-2025-36790 Malicious code in thepond-whitelist-bot (npm)

The package thepond-whitelist-bot was found to contain malicious code...

MAL-2025-34538 Malicious code in tanjiro-ping-bot (npm)

The package tanjiro-ping-bot was found to contain malicious code...

MAL-2025-16002 Malicious code in bot-creator (npm)

The package bot-creator was found to contain malicious code...

MAL-2025-16003 Malicious code in bot-fb (npm)

The package bot-fb was found to contain malicious code...

MAL-2025-15509 Malicious code in basil-bot-2k4 (npm)

The package basil-bot-2k4 was found to contain malicious code...

CVE-2025-54573

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified...

CVE-2025-6722: Exposure of Sensitive Information to an Unauthorized Actor

The BitFire Security – Firewall, WAF, Bot/Spam Blocker, Login Security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5 via the bitfire directory that automatically gets created and stores potentially sensitive files without any access...

CVE-2025-54573

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified...

CVE-2025-54573 CVAT vulnerable to email verification bypass by use of basic authentication

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified...

CVE-2025-54573 CVAT vulnerable to email verification bypass by use of basic authentication

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified...