36 matches found
MAL-2026-3439 Malicious code in @squawk/airway-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f583cb04df39146f4b9270ebfb086bb84b5cf8f799a0565f4b26163ad2a34cd1 The package @squawk/airway-data was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in kiki-keripik50-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e971379e247d4c640907ce64e53b7a5db1b0285878e826f49b63e0355f8b3bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cloud-data (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 424f85d34d816976e9e4e9674c41801256f7db680cdc2c3ce4c5363bd81c876a Any computer that has this package installed or running should be considered...
EUVD-2022-1107
Malicious code in bioql PyPI...
Malicious code in post-data (npm)
The package post-data was found to contain malicious code...
MAL-2025-15007 Malicious code in atlas-data (npm)
The package atlas-data was found to contain malicious code...
Malicious code in atlas-data (npm)
The package atlas-data was found to contain malicious code...
MAL-2025-29531 Malicious code in post-data (npm)
The package post-data was found to contain malicious code...
MAL-2025-39367 Malicious code in wix-data (npm)
The package wix-data was found to contain malicious code...
Debian: Security Advisory (DLA-4261-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 4226-1] dns-root-data DNSSEC trust anchors update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4226-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 23, 2025 https://wiki.debian.org/LTS -...
Malicious code in compat-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3233 Malicious code in compat-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2421 Malicious code in tfjs-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae377a98248827b019055c5171dbcb50bf6eaeae0dd3c0dbf2bb48146fb6ded Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2165 Malicious code in async-query-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c182fcd486203b0e1bcf7d1677e5b65105252c5d88f343b159e8dec92e0c772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2024-39705
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
GHSA-CGVX-9447-VCCH ntlk unsafe deserialization vulnerability
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
CVE-2024-39705
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
PYSEC-2024-167
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...