EUVD-2024-0403

Malicious code in bioql PyPI...

EUVD-2023-43148

Malicious code in bioql PyPI...

EUVD-2022-1719

Malicious code in bioql PyPI...

EUVD-2023-43146

Malicious code in bioql PyPI...

EUVD-2025-24617

Malicious code in bioql PyPI...

EUVD-2022-55422

Malicious code in bioql PyPI...

EUVD-2022-55372

Malicious code in bioql PyPI...

EUVD-2022-55298

Malicious code in bioql PyPI...

EUVD-2025-7556

Malicious code in bioql PyPI...

EUVD-2022-5578

Malicious code in bioql PyPI...

EUVD-2022-3617

Malicious code in bioql PyPI...

EUVD-2025-18433

Malicious code in bioql PyPI...

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

Malicious code in vite-next-logger (npm)

The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...

MAL-2025-47836 Malicious code in vite-next-logger (npm)

The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...

Malware in vite-next-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Server-Side Request Forgery (SSRF)

Next.js is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the improper use of the next function without explicitly passing the request object, which allows an attacker to exploit incorrectly forwarded user-supplied headers in self-hosted applications...

Malicious code in next-optimized-image (npm)

The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...

Malware in next-optimized-image

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47563 Malicious code in next-optimized-image (npm)

The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...