442 matches found
EUVD-2025-176474
Malicious code in sed-promise-book-sun-lambda npm...
EUVD-2025-175750
Malicious code in user-lambda-decompress-benchmark-omega npm...
EUVD-2025-179722
Malicious code in class-kernel-lambda-void-try npm...
EUVD-2025-178221
Malicious code in kappa-pi-nu-beta-lambda npm...
EUVD-2025-178382
Malicious code in integer-lambda-notify-cache-try npm...
EUVD-2025-178159
Malicious code in lambda-byte-sigma-static-reject npm...
MAL-2025-190011 Malicious code in try-phi-lambda-public-validate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6bcc756a01c3ca9eba1d866d684677df2aef5dd2d72a7a333a92b7bbacde80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
[SECURITY] Fedora 43 Update: python-cloudpickle-3.1.2-1.fc43
cloudpickle makes it possible to serialize Python constructs not supported by the default pickle module from the Python standard library. cloudpickle is especially useful for cluster computing where Python expressions are shipped over the network to execute on remote hosts, possibly close to the...
Arbitrary Code Execution
Keras is vulnerable to Arbitrary Code Execution. The vulnerability is due to Model.loadmodel not honoring safemode=True when reading legacy .h5/.hdf5 archives and deserializing pickled Lambda-layer code from a crafted model file, which allows an attacker to supply a malicious archive that execute...
Eval Injection
Overview talkpipe is a Python internal and external DSL for writing generative AI analytics Affected versions of this package are vulnerable to Eval Injection due to using the function eval unsafe in the compileLambda function in the talkpipe/util/datamanipulation.py file. An attacker can execute...
CVE-2025-62695
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...
CVE-2025-62695 Stored XSS through system messages
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...
EUVD-2020-0297
Malware in sbrugna...
EUVD-2018-0171
Malware in sbrugna...
EUVD-2025-30281
Malicious code in bioql PyPI...
EUVD-2025-30277
Malicious code in bioql PyPI...
EUVD-2024-0566
Malicious code in bioql PyPI...
EUVD-2024-0757
Malicious code in bioql PyPI...