EUVD-2023-12852

Malicious code in bioql PyPI...

EUVD-2024-18611

Malicious code in bioql PyPI...

EUVD-2024-54862

Malicious code in bioql PyPI...

EUVD-2022-34527

Malicious code in bioql PyPI...

EUVD-2024-39344

Malicious code in bioql PyPI...

EUVD-2022-33211

Malicious code in bioql PyPI...

EUVD-2025-13700

Malicious code in bioql PyPI...

EUVD-2023-55001

Malicious code in bioql PyPI...

EUVD-2022-31992

Malicious code in bioql PyPI...

EUVD-2024-15961

Malicious code in bioql PyPI...

EUVD-2022-28577

Malicious code in bioql PyPI...

EUVD-2024-35155

Malicious code in bioql PyPI...

EUVD-2025-18742

Malicious code in bioql PyPI...

EUVD-2023-46980

Malicious code in bioql PyPI...

A Lightweight Federated Learning Approach for Privacy-Preserving Botnet Detection in IoT

The rapid growth of the Internet of Things IoT has expanded opportunities for innovation but also increased exposure to botnet-driven cyberattacks. Conventional detection methods often struggle with scalability, privacy, and adaptability in resource-constrained IoT environments. To address these...

Malicious code in fc-system-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 192ca56fc1f77c6e39d9fdded9dbee0f4973f1fc49ee37e5f773d9f60d70858c The OpenSSF Package Analysis project identified 'fc-system-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-47864 Malicious code in v-pure-tooltip (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11bde7847b3225c4c27a2008a9044848c459c69ebe532cf7fd4d0939d4f91f86 Any computer that has this package installed or running should be considered...

MAL-2025-47862 Malicious code in stylelint-config-twbs-applestrap (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4321ac47009a37e5956e0e2eeb2b098a8c56df9d9e9ed0b71c26f78ecff884 Any computer that has this package installed or running should be considered...

Abusing Notion’s AI Agent for Data Theft

Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson's lethal trifecta, it's vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private data --one of the most common purposes...

Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...