EUVD-2022-2859

Malicious code in bioql PyPI...

EUVD-2023-28825

Malicious code in bioql PyPI...

EUVD-2023-0677

Malicious code in bioql PyPI...

EUVD-2024-41547

Malicious code in bioql PyPI...

EUVD-2025-3730

Malicious code in bioql PyPI...

EUVD-2023-40914

Malicious code in bioql PyPI...

EUVD-2023-53933

Malicious code in bioql PyPI...

EUVD-2022-28446

Malicious code in bioql PyPI...

EUVD-2022-46879

Malicious code in bioql PyPI...

EUVD-2022-3751

Malicious code in bioql PyPI...

EUVD-2025-16232

Malicious code in bioql PyPI...

EUVD-2025-21050

Malicious code in bioql PyPI...

EUVD-2022-40725

Malicious code in bioql PyPI...

EUVD-2023-55114

Malicious code in bioql PyPI...

Arbitrary Code Injection

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Arbitrary Code Injection via th...

Arbitrary Code Injection

electron is vulnerable to Arbitrary Code Injection. The vulnerability is due to modification of the resources folder when the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses are enabled, because these fuses fail to fully protect ASAR integrity on writable filesystems; an attacker wi...

CVE-2025-59536

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires...

CVE-2025-59536 Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires...

CVE-2025-59536 Claude Code's startup trust dialog could lead to Command Execution attack

Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires...

CVE-2025-59536

Claude Code (Anthropic) versions before 1.0.111 are vulnerable to code injection due to a flaw in the startup trust dialog. An attacker could trick a user into starting Claude Code in an untrusted project directory, causing code from that project to execute before the user accepts the startup tru...