11474 matches found
EUVD-2025-123638
Malicious code in playwright-mensa-build-ganymede npm...
EUVD-2025-113413
Malicious code in frontend-build-css-loader-europa npm...
EUVD-2025-115915
Malicious code in build-quantum-alphard-figures npm...
EUVD-2025-122248
Malicious code in sass-loader-magellan-build-reveal-md npm...
EUVD-2025-122039
Malicious code in sequelize-version-build-thuban npm...
EUVD-2025-112443
Malicious code in install-build-readable-gacrux npm...
EUVD-2025-113582
Malicious code in flare-hugo-build-loopback npm...
EUVD-2025-122279
Malicious code in sails-delphinus-build-react-bootstrap npm...
EUVD-2025-120667
Malicious code in warp-build-postcss-loader-semantic-release npm...
EUVD-2025-123494
Malicious code in postcss-yaml-lynx-build npm...
EUVD-2025-120506
Malicious code in websockets-odin-build-pipe npm...
EUVD-2025-111745
Malicious code in levels-yaml-build-shelljs npm...
MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141984 Malicious code in element-ui-spinner-bootstrap-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Microsoft Office Multiple Vulnerabilities (Nov 2025) - Mac OS X
This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update November 2025 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2025-10161 Authentication Bypass in Turkguven's Perfektive
Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This...
CVE-2025-10161
CVE-2025-10161 concerns Turkguven Software Technologies Inc. Perfektive prior to version 12574 Build 2701. Affected component/behavior: improper restriction of excessive authentication attempts, client-side enforcement of server-side security, and reliance on untrusted inputs in security decision...
Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise
Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the intent to target GitHub-owned repositories. "We think the intent was to have this script execute during a build of a GitHub-owned...
