886 matches found
EUVD-2025-38230
Malicious code in @chatclub/claude-code npm...
MAL-2025-49379 Malicious code in @chatclub/claude-code (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6acfccb78a615c7f037fe5dbd1001d9a77ca4015c89c94122ba5dd78978b66b The package @chatclub/claude-code was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview @chatclub/claude-code is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Arbitrary Code Execution
@anthropic-ai/claude-code is vulnerable to Arbitrary Code Execution. The vulnerability is due to the automatic execution of Yarn plugins when running yarn --version, which allows an attacker to bypass the directory trust dialog and execute code before the user confirms trust in the directory...
EUVD-2025-36128
Malicious code in @chatgptclaudeclub/claude-code npm...
Malicious Package
Overview @chatgptclaudeclub/claude-code is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malware in @chatgptclaude_club/claude-code
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Claude Code Path Traversal
The vulnerability of the Claude Code code editor is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Claude Code Arbitrary Command Execution
The vulnerability of the Claude Code tool arises due to incorrect cleaning of input data. Exploiting this vulnerability allows a remote attacker to compromise confidentiality and execute arbitrary commands...
CVE-2025-59829
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...
EUVD-2025-31043
Malicious code in bioql PyPI...
EUVD-2025-29501
Malicious code in bioql PyPI...
EUVD-2025-27564
Malicious code in bioql PyPI...
EUVD-2025-19068
Malicious code in bioql PyPI...
EUVD-2025-23572
Malicious code in bioql PyPI...
EUVD-2025-32229
Malicious code in bioql PyPI...
EUVD-2025-23573
Malicious code in bioql PyPI...
EUVD-2025-28585
Malicious code in bioql PyPI...
@4via6/relay (>=1.0.0, <=1.1.3), @axonpush/wizard (>=0.0.1, <=0.0.4) +21 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=0.2.14, <=1.0.119)
@anthropic-ai/claude-code NPM version =0.2.14, =1.0.0, =0.0.1, =0.0.55, =2.13.0-canary.3413b9c, =1.0.0, =0.21.0, =0.1.7, =0.0.1, =0.2.0, =0.0.1, =1.8.0, =0.1.34, =1.4.0, =1.8.0, =1.9.0 and more Source cves: CVE-2025-59829 Source advisory: MEND:CVE-2025-59829...
EUVD-2025-32293
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...