325 matches found
TencentOS Server 3: ruby:2.5 (TSSA-2025:0448)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0448 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
EUVD-2025-112752
Malicious code in html-webpack-plugin-epimetheus-async-vega npm...
EUVD-2021-2513
Malware in sbrugna...
EUVD-2018-0484
Malware in sbrugna...
EUVD-2021-1077
Malware in sbrugna...
EUVD-2022-33576
Malicious code in bioql PyPI...
EUVD-2022-4435
Malicious code in bioql PyPI...
EUVD-2022-2347
Malicious code in bioql PyPI...
EUVD-2024-2800
Malicious code in bioql PyPI...
ruby-advisory-db
This is a database of security advisories for Ruby libraries, maintained by the ruby-advisory-db project. The database contains a list of directories that match the names of Ruby libraries on rubygems.org, with each directory containing one or more advisory files for the library. Each advisory fi...
Malicious code in quick-start_onnxruntime-web-bundler (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41597 Malicious code in quick-start_onnxruntime-web-bundler (npm)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: Carbon design system packages
Summary Various packages are vulnerable to multiples CVEs and can be resolved by updating to [email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected]....
Malicious code in az-bundler (npm)
The package az-bundler was found to contain malicious code...
MAL-2025-15252 Malicious code in az-bundler (npm)
The package az-bundler was found to contain malicious code...
Malicious code in via-component-bundler (npm)
The package via-component-bundler was found to contain malicious code...
MAL-2025-38284 Malicious code in via-component-bundler (npm)
The package via-component-bundler was found to contain malicious code...
MAL-2025-6509 Malicious code in gcdt-bundler (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gcdt-bundler (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in monosize-bundler-rsbuild (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babf3c7a4c6dc1fa0209d4cadd6a45eabab92db8a49425e91ec6083e4d9cfaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...