Malicious code in fca-bot-game (npm)

The package fca-bot-game was found to contain malicious code...

Malicious code in generator-watson-text-bot (npm)

The package generator-watson-text-bot was found to contain malicious code...

Malicious code in tanjiro-ping-bot (npm)

The package tanjiro-ping-bot was found to contain malicious code...

MAL-2025-20289 Malicious code in fca-bot-game (npm)

The package fca-bot-game was found to contain malicious code...

Malicious code in basil-bot-2k4 (npm)

The package basil-bot-2k4 was found to contain malicious code...

Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

Malicious code in bot-creator (npm)

The package bot-creator was found to contain malicious code...

Malicious code in bot-fb (npm)

The package bot-fb was found to contain malicious code...

MAL-2025-17515 Malicious code in contentful-build-bot (npm)

The package contentful-build-bot was found to contain malicious code...

MAL-2025-21313 Malicious code in generator-watson-text-bot (npm)

The package generator-watson-text-bot was found to contain malicious code...

MAL-2025-21274 Malicious code in generator-bot-template-generator (npm)

The package generator-bot-template-generator was found to contain malicious code...

MAL-2025-19121 Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

MAL-2025-34538 Malicious code in tanjiro-ping-bot (npm)

The package tanjiro-ping-bot was found to contain malicious code...

MAL-2025-16003 Malicious code in bot-fb (npm)

The package bot-fb was found to contain malicious code...

MAL-2025-16002 Malicious code in bot-creator (npm)

The package bot-creator was found to contain malicious code...

MAL-2025-16004 Malicious code in bot-methods (npm)

The package bot-methods was found to contain malicious code...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3352 more potentially affected by CVE-2025-55163 via io.netty:netty-codec-http2 (>=4.2.0.Alpha1 <=4.2.3.Final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2025-55163 Source advisory: OSV:GHSA-PRJ3-CCX8-P6X4...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +3352 more potentially affected by CVE-2025-55163 via io.netty:netty-codec-http2 (>=4.2.0.Alpha1 <=4.2.3.Final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2025-55163 Source advisory: SNYK:JAVA-IONETTY-11799531...

CVE-2025-54573

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified...

CVE-2025-54573

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified...