MAL-2025-191562 Malicious code in @gr-exports/head (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6888eb30baaf533b512a0914e8563b29f47351f0154432f6c09fc209656ba10 The package @gr-exports/head was found to contain malicious code...

Malicious code in @gr-exports/body (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ec75ab55ea86ba356e8f21309eb966c00366a526e9737edd15248594209f89 The package @gr-exports/body was found to contain malicious code...

MAL-2025-191559 Malicious code in @gr-common/async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1bf5b6b7e2fd480a24ad41a4ab335d9b6abbc762aec4bcc7a15e5529a0e41c The package @gr-common/async was found to contain malicious code...

Malicious code in solananet (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in binance.csharp (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-191605 Malicious code in bitcoincore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

BackportBench: A Multilingual Benchmark for Automated Backporting of Patches

Many modern software projects evolve rapidly to incorporate new features and security patches. It is important for users to update their dependencies to safer versions, but many still use older, vulnerable package versions because upgrading can be difficult and may break their existing codebase...

EUVD-2025-199933

Malicious code in 7715-permissions-shared npm...

EUVD-2025-199927

Malicious code in babel-plugin-standalone npm...

MAL-2025-191490 Malicious code in com.unity.sharp-zip-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedde339d72e05699d5f33d7c16779f926f419baded72d7cd78d2610395cc807 The package com.unity.sharp-zip-lib was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199911

Malicious code in liblynxtextra.so npm...

EUVD-2025-199913

Malicious code in eslint-plugin-react-hooks-published npm...

EUVD-2025-199912

Malicious code in chain-selectors npm...

EUVD-2025-199910

Malicious code in vitest-environment-jsdom-patched npm...

EUVD-2025-199908

Malicious code in x402-legacy npm...

Malicious code in x402-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...

MAL-2025-191485 Malicious code in x402-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...

MAL-2025-191480 Malicious code in accounts-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07acaccf5cae78ad4bfd5f967e15c5ba68180c1350310492a9065ca97124bf26 The package accounts-base was found to contain malicious code. Source: ghsa-malware cf76e57ba69c401756a0d9279f66fcd197667ce73a011c643099737d08dc306c...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...