369 matches found
MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139983 Malicious code in betelgeuse-hapi-dynamo-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a35da202899a19f4d2770c7c1cd9956c0a0b82316c6be52a6712a1fbfb1568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143864 Malicious code in jasmine-query-yildun-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f632a3252972241dee863dd75f02b97f510ad5c332e9f6ff8b2dcb5eb89a139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141840 Malicious code in dynamo-spectron-proxima-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114359
Malicious code in dotenv-safe-dynamo-proxima-async npm...
Malicious code in epic-dynamo-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...
MAL-2025-49140 Malicious code in epic-dynamo-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...
EUVD-2025-37153
Malicious code in epic-dynamo-utils npm...
EUVD-2020-28213
Malware in sbrugna...
EUVD-2025-11081
Malicious code in bioql PyPI...
MAL-2025-43834 Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)
The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...
Malicious code in cli-bulma-elara-dynamo (npm)
The package cli-bulma-elara-dynamo was found to contain malicious code...
Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)
The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...
Malicious code in electron-postcss-io-dynamo (npm)
The package electron-postcss-io-dynamo was found to contain malicious code...
MAL-2025-44122 Malicious code in electron-postcss-io-dynamo (npm)
The package electron-postcss-io-dynamo was found to contain malicious code...
MAL-2025-43826 Malicious code in cli-bulma-elara-dynamo (npm)
The package cli-bulma-elara-dynamo was found to contain malicious code...
ai-dynamo-vllm (>=0.8.4 <=0.8.4.post4), arbor-ai (>=0.2.2 <=0.2.4) +36 more potentially affected by CVE-2025-57809 via xgrammar (>=0.1.11 <=0.1.19)
xgrammar PYPI version =0.1.11, =0.8.4, =0.2.2, =0.0.2, =0.1.1, =0.1.1, =0.0.2, =1.1.4, =0.1.1, =0.2.0a1, =0.1.2, =0.2.2 - lightrft =0.1.0 - llama-index-postprocessor-rankllm-rerank =0.6.2 and more Source cves: CVE-2025-57809 Source advisory: SNYK:PYTHON-XGRAMMAR-12201487...
ai-dynamo-vllm (>=0.8.4 <=0.8.4.post4), arbor-ai (>=0.2.2 <=0.2.4) +36 more potentially affected by CVE-2025-57809 via xgrammar (>=0.1.11 <=0.1.19)
xgrammar PYPI version =0.1.11, =0.8.4, =0.2.2, =0.0.2, =0.1.1, =0.1.1, =0.0.2, =1.1.4, =0.1.1, =0.2.0a1, =0.1.2, =0.2.2 - lightrft =0.1.0 - llama-index-postprocessor-rankllm-rerank =0.6.2 and more Source cves: CVE-2025-57809 Source advisory: OSV:GHSA-5CMR-4PX5-23PC...
Remote Code Execution (RCE)
Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to using the torch.dynamo.guards.GuardBuilder.get function. An attacker can execute arbitrary code by crafting a...