MAL-2025-191423 Malicious code in shelf-jwt-sessions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccf31522a4305a972564f73554c2b148fd28428cce67b3e73edd235aec25a84 The package shelf-jwt-sessions was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199355

Malicious code in shelf-jwt-sessions npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-6371

Malicious code in bioql PyPI...

CVE-2025-2079

CVE-2025-2079 affects Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool (v3.1.2rc11). Reported issue is a hard-coded secret key that could allow an attacker to generate valid JWT sessions, potentially bypassing authentication and gaining control over the tools. Pu...