Malicious code in github-badge-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f427bc7bcd3bfb173311bffdab461e2c6fc5350dc9ab3f7dc5e9a4ef6d16728 The package github-badge-bot was found to contain malicious code. Source: ghsa-malware f87cd6af8d38dd37db1b6aca4f637451fe3303fa73ed0705216e3711bc4d01...

MAL-2026-46 Malicious code in github-badge-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f427bc7bcd3bfb173311bffdab461e2c6fc5350dc9ab3f7dc5e9a4ef6d16728 The package github-badge-bot was found to contain malicious code. Source: ghsa-malware f87cd6af8d38dd37db1b6aca4f637451fe3303fa73ed0705216e3711bc4d01...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

AI Code in the Wild: Measuring Security Risks and Ecosystem Shifts of AI-Generated Code in Modern Software

Large language models LLMs for code generation are becoming integral to modern software development, but their real-world prevalence and security impact remain poorly understood. We present the first large-scale empirical study of AI-generated code AIGCode in the wild. We build a high-precision...

Malicious code in adk-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee46eaaea8bb0b2c04c936cd56cf6c030b92c551fe72a435a680680bc4b38bf9 The package adk-github was found to contain malicious code. Source: ghsa-malware feba07c14c2a8afde4296fe5a5c92d7bbec73e06a94fbc29edbd525f98e3ef42 Any...

MAL-2025-192619 Malicious code in adk-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee46eaaea8bb0b2c04c936cd56cf6c030b92c551fe72a435a680680bc4b38bf9 The package adk-github was found to contain malicious code. Source: ghsa-malware feba07c14c2a8afde4296fe5a5c92d7bbec73e06a94fbc29edbd525f98e3ef42 Any...

EUVD-2025-204501

Malicious code in adk-github npm...

Malicious Package

Overview adk-github is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malware in adk-github

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-63387

creationtimestamp| type| source ---|---|--- 2025-12-19 08:06:02+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-63387.yaml 2025-12-20 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44eqgd32r 2025-12-22...

CVE-2025-13307

creationtimestamp| type| source ---|---|--- 2025-12-19 07:05:59+00:00| seen| https://infosec.exchange/users/offseq/statuses/115744961823636580 2025-12-19 07:41:52+00:00| seen| https://gist.github.com/Darkcrai86/cd1792c2fd62567e2cd967ae4c56f9c8 2025-12-19 08:07:53+00:00| seen|...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

GHSA-W853-JP5J-5J7F vulnerabilities

Vulnerabilities for packages: open-webui, kserve, py3-cassandra-medusa, airflow...

GHSA-W853-JP5J-5J7F vulnerabilities

Vulnerabilities for packages: kserve, py3-cassandra-medusa, kserve-huggingfaceserver-cuda-13.3, mlflow, airflow, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, awx, request-1276...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

EUVD-2025-204426

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

CVE-2025-67844: Direct Request

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

CVE-2025-67844

The Mintlify Platform’s GitHub Integration API (pre-2025-11-15) fails to validate that configured repository owner/name belong to the user’s GitHub App Installation ID, enabling disclosure of sensitive repository metadata. Multiple sources corroborate the issue and cite the same root cause in the...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...