EUVD-2025-30258

Malicious code in bioql PyPI...

EUVD-2022-2979

Malicious code in bioql PyPI...

EUVD-2025-27994

Malicious code in bioql PyPI...

EUVD-2025-30193

Malicious code in bioql PyPI...

EUVD-2023-44400

Malicious code in bioql PyPI...

Malicious code in typing-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9c677715e7d6777e0959af0efc0bdc272553cd5e6fe9a72febb54c080a10ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-40402

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments affected versions not specified Description The software stores a significant number of sensitive credentials, including database passwords, MySQL ro...

TRUSTCHECKPOINTS: Time Betrays Malware for Unconditional Software Root of Trust

Modern IoT and embedded platforms must start execution from a known trusted state to thwart malware, ensure secure firmware updates, and protect critical infrastructure. Current approaches to establish a root of trust depend on secret keys and/or specialized secure hardware, which drives up costs...

Malicious code in @cat-ai/assistant-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d4d09d0b50027d4061df3bcfc206f5e4c96c6e1a9f67f5ce3c6e997e91507e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47505 Malicious code in tailwind-scrollmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 670918a6780c8dfd5085225b5db85733fee0cfde4128583ec1c4028d9168b2bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-54807

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

MAL-2025-47470 Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-38609

Name of the Vulnerable Software and Affected Versions Vasion Print Virtual Appliance Host versions prior to 25.2.169 Vasion Print Application versions prior to 25.2.1518 Description The Vasion Print Virtual Appliance and Application expose Docker internal networks, allowing attackers on the same...

CVE-2025-54807 Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

PT-2025-38480

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The secret used for validating authentication tokens is hardcoded in device firmware. An attacker who obtains the signing key can bypass authentication, gaining...

Malicious code in create-hest-app (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4f8a7c74b24a78d61a35d81d643117f524f843b425f34d281012f7ab8632868 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47292 Malicious code in @yoobic/yobi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f973d949e3a5ae002289cfd3e93009c3a8122535b1f75f0363bd8e2c04a2548 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in capacitor-plugin-vonage (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d89f3813eea824f42ffe8eba246c1abb9f4857b3a7cb55155a7941b9631b49b Any computer that has this package installed or running should be considered fully compromised. All...