EUVD-2025-18985

Rejected reason: Not used...

EUVD-2025-18984

Rejected reason: Not used...

EUVD-2025-18983

Rejected reason: Not used...

EUVD-2025-18978

Rejected reason: Not used...

EUVD-2025-18977

Rejected reason: Not used...

EUVD-2025-18982

Rejected reason: Not used...

EUVD-2025-18980

Rejected reason: Not used...

EUVD-2025-28224

Rejected reason: Not used...

EUVD-2025-28221

Rejected reason: Not used...

EUVD-2025-28223

Rejected reason: Not used...

EUVD-2025-28226

Rejected reason: Not used...

EUVD-2025-28229

Rejected reason: Not used...

EUVD-2025-28225

Rejected reason: Not used...

EUVD-2025-28228

Rejected reason: Not used...

EUVD-2025-28222

Rejected reason: Not used...

EUVD-2025-28227

Rejected reason: Not used...

MAL-2026-17889 Malicious code in proxyrobika (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca9520dcc3936b679b577bee42392ecb6ee65cd658c4858d325de5c738a7a200 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

The plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting HEAD matched the pinned SHA. An attacker controlling a plugin's upstream repository could create a branch named identically to the pinned...

Astra Linux – Vulnerability in Firefox

An attacker who could have convinced a user to drag and drop an image into a file system could have manipulated the resulting filename to include an executable extension. By doing so, the attacker could potentially trick the user into executing malicious code. Although very similar, this is a...

Malicious code in xapi-lib (npm)

[email protected], 88.2.5, 90.2.1, and 90.3.1 describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value fa79878bc2cfb48bd5127ae26fb661b1, which i...