EUVD-2024-52393

Malicious code in bioql PyPI...

EUVD-2023-2672

Malicious code in bioql PyPI...

EUVD-2024-0338

Malicious code in bioql PyPI...

EUVD-2023-2943

Malicious code in bioql PyPI...

EUVD-2023-46141

Malicious code in bioql PyPI...

EUVD-2024-2745

Malicious code in bioql PyPI...

EUVD-2024-0388

Malicious code in bioql PyPI...

EUVD-2024-25921

Malicious code in bioql PyPI...

EUVD-2025-28611

Malicious code in bioql PyPI...

EUVD-2023-49890

Malicious code in bioql PyPI...

EUVD-2024-16845

Malicious code in bioql PyPI...

EUVD-2025-6034

Malicious code in bioql PyPI...

EUVD-2025-27070

Malicious code in bioql PyPI...

EUVD-2023-1928

Malicious code in bioql PyPI...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corrupti...

Unauthorized Disclosure Of Sensitive Data

github.com/rancher/fleet is vulnerable to Unauthorized Disclosure of Sensitive Data. The vulnerability is due to improper access control on BundleDeployment resources with GET or LIST permissions, which allows an attacker to retrieve Helm values containing credentials or other secrets...

PT-2025-39430

Name of the Vulnerable Software and Affected Versions vulnerability-lookup version 2.16.0 Description A cross-site scripting XSS issue exists in the handling of user-supplied input within the Bundles, Comments, and Sightings components of the software. Untrusted data was not properly sanitized...

Malicious code in @operato/styles (npm)

Suspicious postinstall script executing bundle.js and unsignedbitwisemathexcess YARA rule match indicates malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f85f761f5ad599532a97a4c4c64bea4910004e56178cd4081fefb3b113ed8d6d Any computer that has this...

Malicious code in @things-factory/integration-marketplace (npm)

Suspicious postinstall script executing bundle.js and YARA rule match on bundle.js suggests malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707cb5e2a466e8a099c5ffaaf71fd576d658e67702737dd3dfef8dc62127aa8f Any computer that has this package...

Malicious code in @things-factory/integration-base (npm)

Suspicious postinstall script executing bundle.js, which contains excessive unsigned bitwise math, indicating potential malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b2496d9a593750ea26a4cea41022e9b78c9bae1ac1b398aa506868e90e794e Any computer...