MAL-2025-48528 Malicious code in canary-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74897d1cb26c40f57347ed1208575b63c7c1feb3a92ea2bef8bc84db2700bd8a The OpenSSF Package Analysis project identified 'canary-ng' @ 1337.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-48458 Malicious code in src_plugin_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396cc58d08775057aef35e59ad51a28c7379449f6f00332d193138ff8b9de09a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-47410: Cross-Site Request Forgery (CSRF)

Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user. This...

MAL-2025-48437 Malicious code in hyperion-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b9ccc060b3a05f5422ec317fc83c828522f43b1b0b2ce916d1c5d72bf082366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48314 Malicious code in my-unique-package-here (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19289cab4482d99ed5e7a74abf6e380b1336b01b89502d23f3a63398b077f128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2017-7488

Malware in sbrugna...

EUVD-2006-3116

Malware in sbrugna...

EUVD-2020-28628

Malware in sbrugna...

EUVD-2020-3849

Malware in sbrugna...

EUVD-2019-10141

Malware in sbrugna...

EUVD-2020-0101

Malware in sbrugna...

EUVD-2017-6516

Malware in sbrugna...

EUVD-2017-17155

Malware in sbrugna...

EUVD-2024-37706

Malicious code in bioql PyPI...

EUVD-2025-18218

Malicious code in bioql PyPI...

EUVD-2023-2729

Malicious code in bioql PyPI...

EUVD-2023-1813

Malicious code in bioql PyPI...

EUVD-2021-8682

Malicious code in bioql PyPI...

EUVD-2024-25942

Malicious code in bioql PyPI...

Malicious code in trendwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcc4e365d2552163150eaf2fa138c0275533d653441752a4eb49ac5087100fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...