10168 matches found
EUVD-2025-37160
Malicious code in epic-diesel-components npm...
MAL-2025-49133 Malicious code in epic-diesel-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c845610e9f2b712b89218940faed5b186517dacfde23d4dda9d95833b3cdb9a4 The package epic-diesel-components was found to contain malicious code...
MAL-2025-49201 Malicious code in epic-ue-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be8aaeadc65eecac5d97a903d0ab829cbce32f8b021d50552e1d584a5329237 The package epic-ue-components was found to contain malicious code...
Security Bulletin: IBM QRadar Hub for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Hub for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP clien...
[SECURITY] Fedora 42 Update: qt6-qttools-6.9.3-1.fc42
Qt6 - QtTool components...
[SECURITY] Fedora 42 Update: qt6-qtwebengine-6.9.3-1.fc42
Qt6 - QtWebEngine components...
[SECURITY] Fedora 42 Update: qt6-qtconnectivity-6.9.3-1.fc42
Qt6 - Connectivity components...
EUVD-2025-36885
Malicious code in geopost-angular-components npm...
Malicious Package
Overview geopost-angular-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
UBUNTU-CVE-2025-61725
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...
EUVD-2025-36752
Malicious code in xo-ui-components npm...
Malicious Package
Overview xo-ui-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview xo-third-party-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2025-49072 Malicious code in xo-third-party-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in xo-third-party-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in xo-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58815a099f64599f6c8c7778c42dc78094abeace3c685c538fe1ee5604b86818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-49075 Malicious code in xo-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58815a099f64599f6c8c7778c42dc78094abeace3c685c538fe1ee5604b86818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36751
Malicious code in xo-third-party-components npm...
Malicious code in xo-login-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...