17043 matches found
EUVD-2020-10675
Malware in sbrugna...
Malicious code in graphflux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81407cede8c4a0a29787867b0a52b7947864a775ff7efbe05ce00785ea6160a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in dragon0905-vite-tsconfig-assistant
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in vite-tsconfig-assistant
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @dotevn/config
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in kecacapp
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47922 Malicious code in cryptodotjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cfa09b618dc51e1ed65556120fb823276eaaaa7a3e75a2c684da978cd11842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @winstan/binston (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a456158c683cc4e3bd977ec81310c39b3cf491b14458ed49766c0f58805cec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in winston-logger-pro
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47921 Malicious code in @winstan/vinston (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 701c8532f7235adb3a68d19af65d9a7b583be566885ae32b443bb5789e58ec84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROS-20251007-04
A vulnerability in GLPI's computer hardware request, incident, and inventory system is related to a key-based authorization bypass. key authorization. Exploitation of the vulnerability could allow a remote intruder, compromise the system Vulnerability in the GLPI computer equipment request,...
Code Agent Can Be an End-To-End System Hacker: Benchmarking Real-World Threats of Computer-Use Agent
Computer-use agent CUA frameworks, powered by large language models LLMs or multimodal LLMs MLLMs, are rapidly maturing as assistants that can perceive context, reason, and act directly within software environments. Among their most critical applications is operating system OS control. As CUAs in...
MAL-2025-48084 Malicious code in vn-hrm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7e7500ba0af4e9b2c0354a3820e7c28cc50ed3e9092db9e4c3c3cba3958234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-53609 scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"
In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed" The "atomicinc&cmd-device-iorequestcnt" in scsiqueuerq would cause kernel panic because cmd-device may be freed after returning from...
EUVD-2025-25254
Malicious code in bioql PyPI...
EUVD-2023-23621
Malicious code in bioql PyPI...
EUVD-2025-29180
Malicious code in bioql PyPI...
EUVD-2025-29547
Malicious code in bioql PyPI...