EUVD-2025-19055

Malicious code in bioql PyPI...

EUVD-2025-19967

Malicious code in bioql PyPI...

EUVD-2025-10482

Malicious code in bioql PyPI...

EUVD-2025-10249

Malicious code in bioql PyPI...

EUVD-2024-30341

Malicious code in bioql PyPI...

EUVD-2023-49423

Malicious code in bioql PyPI...

EUVD-2024-29903

Malicious code in bioql PyPI...

EUVD-2025-29384

Malicious code in bioql PyPI...

EUVD-2025-23764

Malicious code in bioql PyPI...

EUVD-2023-52809

Malicious code in bioql PyPI...

EUVD-2025-24409

Malicious code in bioql PyPI...

EUVD-2023-2786

Malicious code in bioql PyPI...

EUVD-2023-50218

Malicious code in bioql PyPI...

EUVD-2023-33296

Malicious code in bioql PyPI...

EUVD-2024-45917

Malicious code in bioql PyPI...

CVE-2025-9991

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2025-9991 Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

WordPress Tiny Bootstrap Elements Light plugin <= 4.3.34 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Aril Aprilio forsak3n in WordPress Plugin Tiny Bootstrap Elements Light versions = 4.3.34...

Malicious code in dotenv-light (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae938c214e61a6e70c595df567e32105d5c5eebb0cd147deae6c5f7fe91c75c5 Any computer that has this package installed or running should be considered...

MAL-2025-47584 Malicious code in dotenv-light (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae938c214e61a6e70c595df567e32105d5c5eebb0cd147deae6c5f7fe91c75c5 Any computer that has this package installed or running should be considered...