EUVD-2024-0909

Malicious code in bioql PyPI...

EUVD-2023-1528

Malicious code in bioql PyPI...

EUVD-2022-6547

Malicious code in bioql PyPI...

EUVD-2022-6905

Malicious code in bioql PyPI...

EUVD-2023-36291

Malicious code in bioql PyPI...

EUVD-2022-6518

Malicious code in bioql PyPI...

EUVD-2022-1341

Malicious code in bioql PyPI...

EUVD-2024-3480

Malicious code in bioql PyPI...

EUVD-2023-34968

Malicious code in bioql PyPI...

EUVD-2023-36802

Malicious code in bioql PyPI...

EUVD-2024-19623

Malicious code in bioql PyPI...

RLSA-2025:8493 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

CVE-2025-57353

The Runtime components of messageformat package for Node.js before 3.0.2 contain a prototype pollution vulnerability. Due to insufficient validation of nested message keys during the processing of message data, an attacker can manipulate the prototype chain of JavaScript objects by providing...

MAL-2025-47699 Malicious code in nodejs-example-google-cloud-monitoring (npm)

--- -= Per source details. Do not edit below this line.=-...

server-sqli

This is a PoC exploit for CVE-YYYY-NNNN, an intentional SQL inje...

Multiple Node.js Modules compromised in supply chain attack to harvest credentials (Shai-Hulud) (11/25/2025)

The remote host has a version of one or more Node.js modules installed known to be compromised in a supply chain attack Shai-Hulud. The modules that are vulnerable are referenced here: - https://github.com/tenable/shai-hulud-second-coming-affected-packages/blob/main/list.md. A malicious update to...

GHSA-2488-W585-72CH counterpart vulnerable to prototype pollution

A vulnerability exists in the counterpart library for Node.js and the browser due to insufficient sanitization of user-controlled input in translation key processing. The affected versions prior to 0.18.6 allow attackers to manipulate the library's translation functionality by supplying malicious...

Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, Node.js and IBM WebSphere Application Server Liberty used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2025-36000 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to...

CVE-2025-57353

The Runtime components of messageformat package for Node.js before 3.0.2 contain a prototype pollution vulnerability. Due to insufficient validation of nested message keys during the processing of message data, an attacker can manipulate the prototype chain of JavaScript objects by providing...

CVE-2025-57353

CVE-2025-57353 affects the Runtime components of the Node.js messageformat package (versions before 3.0.2). The issue is a prototype pollution vulnerability caused by insufficient validation of nested message keys during processing, allowing an attacker to modify Object.prototype and inject arbit...