Malicious code in optional-native-module-xyz (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91d8c0e42c231414befecab31d6e25c851443c94c0f8eaf179aa62012264967e Any computer that has this package installed or running should be considered...

EUVD-2023-41445

Malicious code in bioql PyPI...

EUVD-2023-41433

Malicious code in bioql PyPI...

EUVD-2022-51007

Malicious code in bioql PyPI...

EUVD-2023-41438

Malicious code in bioql PyPI...

EUVD-2022-28642

Malicious code in bioql PyPI...

EUVD-2023-41442

Malicious code in bioql PyPI...

EUVD-2024-20854

Malicious code in bioql PyPI...

EUVD-2021-8004

Malicious code in bioql PyPI...

EUVD-2024-1333

Malicious code in bioql PyPI...

EUVD-2023-41437

Malicious code in bioql PyPI...

EUVD-2023-41434

Malicious code in bioql PyPI...

EUVD-2022-52229

Malicious code in bioql PyPI...

EUVD-2023-29911

Malicious code in bioql PyPI...

EUVD-2023-41431

Malicious code in bioql PyPI...

Malicious code in pglite-2 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @xcxcxxx/gsap3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2b40f953bb5a5912e570360e414e6cfa40076203e4625982216196baf98874e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4736 Malicious code in copy-package-contents (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219b6f163c59d78fd936297643511fdfb25a63f8ed99ce66949104cdf17efcad Any computer that has this package installed or running should be considered...

CVE-2023-37555

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition...

CVE-2010-2278

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...