EUVD-2024-34342

Malicious code in bioql PyPI...

EUVD-2023-58536

Malicious code in bioql PyPI...

EUVD-2024-27107

Malicious code in bioql PyPI...

EUVD-2025-17132

Malicious code in bioql PyPI...

EUVD-2024-27104

Malicious code in bioql PyPI...

EUVD-2025-24988

Malicious code in bioql PyPI...

EUVD-2022-44209

Malicious code in bioql PyPI...

EUVD-2025-21412

Malicious code in bioql PyPI...

EUVD-2024-40626

Malicious code in bioql PyPI...

EUVD-2024-35526

Malicious code in bioql PyPI...

EUVD-2025-2929

Malicious code in bioql PyPI...

EUVD-2024-27093

Malicious code in bioql PyPI...

EUVD-2023-0615

Malicious code in bioql PyPI...

EUVD-2024-51149

Malicious code in bioql PyPI...

MAL-2025-47900 Malicious code in kss-node-handlebars-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca63cd37e035f2a065952377f5c8b77ac950f443c2ac3233ead4b6203f62d9c The OpenSSF Package Analysis project identified 'kss-node-handlebars-builder' @ 9.0.1 npm as malicious. It is considered malicious because: - Th...

XWorm V6: Exploring Pivotal Plugins

XWorm V6: Exploring Pivotal Plugins By Niranjan Hegde and Sijo Jacob · October 2, 2025 Introduction In the constantly evolving world of cyber threats, staying informed is not just an advantage; it's a necessity. First observed in 2022, XWorm quickly gained notoriety as a highly effective malware,...

WordPress WP Popup Builder plugin <= 1.3.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Bao - BlueRock in WordPress Plugin WP Popup Builder versions = 1.3.6...

CVE-2025-59002

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SeaTheme BM Content Builder bm-builder allows Path Traversal.This issue affects BM Content Builder: from n/a through 3.16.3.3...

MAL-2025-47855 Malicious code in openwhisk-probot-builder (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df529e6edfae25a9476f48b45ecffb81a502aff2baa1f23ffe224a99c88a0fa5 Any computer that has this package installed or running should be considered...

Malicious code in openwhisk-probot-builder (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df529e6edfae25a9476f48b45ecffb81a502aff2baa1f23ffe224a99c88a0fa5 Any computer that has this package installed or running should be considered...