1250 matches found
EUVD-2017-17720
Malware in sbrugna...
EUVD-2017-16757
Malware in sbrugna...
EUVD-2015-8457
Malware in sbrugna...
EUVD-2015-8456
Malware in sbrugna...
EUVD-2015-8455
Malware in sbrugna...
EUVD-2020-29102
Malware in sbrugna...
EUVD-2017-14504
Malware in sbrugna...
EUVD-2012-1855
Malware in sbrugna...
EUVD-2025-24592
Malicious code in bioql PyPI...
PT-2025-39672
Name of the Vulnerable Software and Affected Versions Dibo Data Decision Making System versions prior to 2.7.0 Description A path traversal issue exists in Dibo Data Decision Making System. The issue is related to the manipulation of the filePath argument within the downloadImpTemplet function...
@capriza/far (>=0.1.2 <=2.4.2), @cobalt-engine/cobower (=2.0.0) +388 more potentially affected by CVE-2025-59343 via tar-fs (>=0.1.8 <=1.16.3)
tar-fs NPM version =0.1.8, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.2 - @elm-node/npm-scripts =1.0.0 - @hlsrules-test/fc-libreoffice =1.0.0 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR...
Malicious code in private-dep-with-frontend-plugin-index-path (npm)
The package private-dep-with-frontend-plugin-index-path was found to contain malicious code...
MAL-2025-44701 Malicious code in inline-dep (npm)
The package inline-dep was found to contain malicious code...
MAL-2025-45592 Malicious code in private-dep-with-frontend-plugin-index-path (npm)
The package private-dep-with-frontend-plugin-index-path was found to contain malicious code...
Malicious code in cyclic-dep-explicit-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...
MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...
Malicious code in rush-cyclic-dep-1 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...
MAL-2025-41324 Malicious code in rush-cyclic-dep-1 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...
Malicious code in rush-cyclic-dep-2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e5cc5e314974fca4f3bebd4496f775715aaac26a94fcde395ec10bae8ac3758 The OpenSSF Package Analysis project identified 'rush-cyclic-dep-2' @...
MAL-2025-41325 Malicious code in rush-cyclic-dep-2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e5cc5e314974fca4f3bebd4496f775715aaac26a94fcde395ec10bae8ac3758 The OpenSSF Package Analysis project identified 'rush-cyclic-dep-2' @...