Hackers Poison Axios npm Package with 100 Million Weekly Downloads

Axios npm Package compromised in a supply chain attack, exposing developers to malware, data theft, and full system takeover risks worldwide...

EUVD-2025-175354

Malicious code in worldskills npm...

EUVD-2025-99216

Malicious code in erick-martabak31-riris npm...

EUVD-2025-27597

Malicious code in bioql PyPI...

PT-2025-15232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.3.0 Description Langflow is susceptible to unauthenticated remote code execution due to a code injection flaw in the '/api/v1/validate/code' endpoint. A remote attacker can send crafted HTTP requests containing...

Malicious code in template-fullstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33633d723507a7bd9bbcf51856f1bcf071d699040b50df09cdc88b8c343feb36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-video-supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db930f36eaed1e211ff3c4bfe705bc87e6f2b573fda13ca25fc657118d8d3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scoot-layout-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09230af6397fced3ca15612fad365e70e995e8a83c26af0004b8e1fd8000e02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”

The pandemic and remote work shattered your perimeter. Your attack surface has changed — and will keep changing. It’s our mission to help customers strengthen security defenses and stay ahead of evil. As the modern perimeter expands, new and old vulnerabilities emerge as open doors for attackers;...

NeXpose 5.0 vulnerability management solution Released by Rapid7

NeXpose 5.0 vulnerability management solution Released by Rapid7 Nexpose proactively supports the entire vulnerability management lifecycle, including discovery, detection, verification, risk classification, impact analysis, reporting and mitigation. This gives organizations immediate insight int...