EUVD-2025-79645

Malicious code in civicarmadilloz3n npm...

EUVD-2025-82504

Malicious code in civicdingo0xrequest npm...

EUVD-2025-82503

Malicious code in civicmartendumbs npm...

EUVD-2025-64993

Malicious code in civicturtlez3n npm...

MAL-2025-93560 Malicious code in civic_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d04608efd062b076e5b30a4af5d9e9b7887c1e08702c71f4a49739a06637a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55450

Malicious code in civic-brown-wasp npm...

Malicious code in civic-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09644eb5056abf45b687d17181ba94df4cf0d0ae6b8b6c66d65529e6d540b126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12082

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

EUVD-2008-3835

Malware in sbrugna...

EUVD-2016-6604

Malware in sbrugna...

EUVD-2016-6605

Malware in sbrugna...

EUVD-2022-31763

Malicious code in bioql PyPI...

EUVD-2021-32845

Malicious code in bioql PyPI...

CVE-2021-34369

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "the information that is being queried is authorized for an authenticated user of that application,...

CVE-2021-34370

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2021-46145

The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization...

@civic/civic-link (>=0.0.5, <=0.0.8-beta.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.65.0)

@solana/web3.js NPM version 1.65.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/civic-link =0.0.5, =0.0.8-beta.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

COTI and Civic Partner to Give Users Self-sovereignty of Their Digital Identity

By Uzair Amir COTI's V2 confidentiality layer secures Civic's Dynamic DID, empowering users with control over their data and seamless regulatory compliance. This is a post from HackRead.com Read the original post: COTI and Civic Partner to Give Users Self-sovereignty of Their Digital Identity...

AI as Sensemaking for Public Comments

Its become fashionable to think of artificial intelligence as an inherently dehumanizing technology, a ruthless force of automation that has unleashed legions of virtual skilled laborers in faceless form. But what if AI turns out to be the one tool able to identify what makes your ideas special,...