357 matches found
EUVD-2025-3650
Malicious code in bioql PyPI...
EUVD-2024-47041
Malicious code in bioql PyPI...
EUVD-2021-28917
Malicious code in bioql PyPI...
EUVD-2022-52596
Malicious code in bioql PyPI...
EUVD-2024-38812
Malicious code in bioql PyPI...
MAL-2025-47560 Malicious code in internallib_v714 (npm)
The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...
MAL-2025-47487 Malicious code in luma-glow-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Summar Portal del Empleado 代码问题漏洞
Summar Portal del Empleado is an employee portal system from Summar Spain. A code issue vulnerability exists in Summar Portal del Empleado that stems from an unrestricted hazardous file type upload that could result in the upload of malicious files via the parameter...
MAL-2025-47145 Malicious code in @huobi-lib/vulcan-js-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47071 Malicious code in internallib_v773 (npm)
The package internallibv773 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ca5d98584be4425021e54e63f1ca3bc45dde0db7ebe47df3fcdebb62bcc7c8 Any computer that has this package installed or running should be considered fully...
PT-2025-36996
Name of the Vulnerable Software and Affected Versions: Prebid Universal Creative PUC versions 1.17.3 and latest Description: Prebid Universal Creative PUC is a JavaScript API used to render multiple formats. Npm users of PUC were briefly affected by crypto-related malware. Recommendations:...
Malicious code in proto-tinker-wc (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7c28102f10f0e7abdda4eaae50e9db8edf27c3b15fe2ba6841ceb95fa907adc Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-45444 Malicious code in oktafian-gembus35-breki (npm)
The package oktafian-gembus35-breki was found to contain malicious code...
Malicious code in rtk-wake (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc493187ac88a35f426edb64ab97f58fcd188ce208058c832d5bd05143ec899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fake CoinMarketCap Journalists Targeting Crypto Executives in Spear-Phishing Campaign
Fake CoinMarketCap journalist profiles used in spear-phishing target crypto execs via Zoom interviews, risking malware, data theft, and…...
WordPress plugin Online Booking & Scheduling Calendar for WordPress by vcita 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress plug...
Malicious code in monitor-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b3ec369d2a6afae57510092891fcd5712904ac9b195a9bd20099aa37d9c079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2018-1000665
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and...
