EUVD-2025-177181

Malicious code in pi-emulate-lambda-alert-sandbox npm...

EUVD-2025-175864

Malicious code in try-phi-lambda-public-validate npm...

MAL-2025-187723 Malicious code in lambda-byte-sigma-static-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e512f773e77c8591c7fdc12e28652a7c98180e468e2eaac0b828ba21c83918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175750

Malicious code in user-lambda-decompress-benchmark-omega npm...

EUVD-2025-175397

Malicious code in zeta-lambda-abstract-eta-secure npm...

EUVD-2025-179161

Malicious code in emulate-earth-lambda-iota-mock npm...

[SECURITY] Fedora 43 Update: python-cloudpickle-3.1.2-1.fc43

cloudpickle makes it possible to serialize Python constructs not supported by the default pickle module from the Python standard library. cloudpickle is especially useful for cluster computing where Python expressions are shipped over the network to execute on remote hosts, possibly close to the...

Arbitrary Code Execution

Keras is vulnerable to Arbitrary Code Execution. The vulnerability is due to Model.loadmodel not honoring safemode=True when reading legacy .h5/.hdf5 archives and deserializing pickled Lambda-layer code from a crafted model file, which allows an attacker to supply a malicious archive that execute...

Eval Injection

Overview talkpipe is a Python internal and external DSL for writing generative AI analytics Affected versions of this package are vulnerable to Eval Injection due to using the function eval unsafe in the compileLambda function in the talkpipe/util/datamanipulation.py file. An attacker can execute...

CVE-2025-62695

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

CVE-2025-62695 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

EUVD-2020-0297

Malware in sbrugna...

EUVD-2018-0171

Malware in sbrugna...

EUVD-2024-0944

Malicious code in bioql PyPI...

EUVD-2025-30277

Malicious code in bioql PyPI...

EUVD-2024-0566

Malicious code in bioql PyPI...

EUVD-2024-0757

Malicious code in bioql PyPI...

EUVD-2024-0590

Malicious code in bioql PyPI...

EUVD-2025-30281

Malicious code in bioql PyPI...

EUVD-2025-0113

Malicious code in bioql PyPI...