finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79720 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79718 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79718 Source advisory: OSV:PYSEC-2026-4001...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79719 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) +4 more potentially affected by CVE-2026-79720 via netron (>=7.9.9, <=8.9.9)

netron PYPI version =7.9.9, =1.3.0, =0.0.0, =0.1.2, =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79720 Source advisory: MEND:CVE-2026-79720...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) +4 more potentially affected by CVE-2026-79719 via netron (>=7.9.9, <=8.9.9)

netron PYPI version =7.9.9, =1.3.0, =0.0.0, =0.1.2, =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79719 Source advisory: MEND:CVE-2026-79719...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) +4 more potentially affected by CVE-2026-79718 via netron (>=7.9.9, <=8.9.9)

netron PYPI version =7.9.9, =1.3.0, =0.0.0, =0.1.2, =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79718 Source advisory: MEND:CVE-2026-79718...

Malicious Package

Overview finn-pulse-init is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48494 Malicious code in gardr-finn (npm)

The package gardr-finn was found to contain malicious code...

Malicious code in gardr-finn-js (npm)

The package gardr-finn-js was found to contain malicious code...

MAL-2025-48495 Malicious code in gardr-finn-js (npm)

The package gardr-finn-js was found to contain malicious code...

Malicious code in gardr-finn (npm)

The package gardr-finn was found to contain malicious code...

CVE-2025-48322

CVE-2025-48322 – WordPress Statify Widget stored XSS Affected: Statify Widget (WordPress plugin) up to and including version 1.4.6.Root cause: Improper neutralization of input during web page generation, enabling stored XSS.Impact: Stored Cross-Site Scripting vulnerability; exact user impact depe...

CVE-2025-48322: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Finn Dohrn Statify Widget statify-widget allows Stored XSS.This issue affects Statify Widget: from n/a through = 1.4.6...

Malicious code in @zalastax/nolb-finn (npm)

The package @zalastax/nolb-finn was found to contain malicious code...

Malicious code in finn-lib-supported-platforms (npm)

The package finn-lib-supported-platforms was found to contain malicious code...

MAL-2025-11454 Malicious code in @zalastax/nolb-finn (npm)

The package @zalastax/nolb-finn was found to contain malicious code...

MAL-2025-20574 Malicious code in finn-lib-supported-platforms (npm)

The package finn-lib-supported-platforms was found to contain malicious code...

Side-Channel Extraction of Dataflow AI Accelerator Hardware Parameters

Dataflow neural network accelerators efficiently process AI tasks on FPGAs, with deployment simplified by ready-to-use frameworks and pre-trained models. However, this convenience makes them vulnerable to malicious actors seeking to reverse engineer valuable Intellectual Property IP through...

Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’?

The FBI joined authorities across Europe last week in seizing domain names for Cracked and Nulled , English-language cybercrime forums with millions of users that trafficked in stolen data, hacking tools and malware. An investigation into the history of these communities shows their apparent...

MAL-2024-11203 Malicious code in finn-pulse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8556cda5df574e7c339a9e910f83692fefe384dd8c3c1107fafd270c8057a170 The OpenSSF Package Analysis project identified 'finn-pulse-init' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...