1499 matches found
Malicious code in runway-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ab69fc94c1b9d37312b22a4c970856a3b27f84b4f7e957ff2771a2244a527264 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6514 Malicious code in graphalgo (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious Package
Overview @kodane/patch-manager is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-6292 Malicious code in lu-anywhere (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6270 Malicious code in @wptv/seo (npm)
The package communicates with a domain associated with malicious activity...
Fedora: Security Advisory (FEDORA-2025-ef6e0fa117)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2025-6158 Malicious code in dependabot-auto-triage (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0f3b4b8521203a882b46f61419d108cb731522a0a8c231bc89b22406803057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Alibaba Cloud Linux 3 : 0113: python3.11-setuptools (ALINUX3-SA-2025:0113)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0113 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-47273: setuptools is a package that allows...
Debian: Security Advisory (DLA-4242-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2025-6047 Malicious code in @toptal/picasso-form (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6056 Malicious code in @toptal/picasso-popper (npm)
The package communicates with a domain associated with malicious activity...
Fedora 41 : screen (2025-653690f2f7)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-653690f2f7 advisory. Update default config options for build. ---- New upstream release 5.0.1 Tenable has extracted the preceding description block directly from the...
CVE-2025-49812 affecting package httpd for versions less than 2.4.64-1
CVE-2025-49812 affecting package httpd for versions less than 2.4.64-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-49809 affecting package mtr for versions less than 0.95-3
CVE-2025-49809 affecting package mtr for versions less than 0.95-3. A patched version of the package is available...
Malicious code in memlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a0d0e362d3ea9b768078a9e47f80c667acef799c7099f8044e74fd1738fdedb4 Installing the package triggers a code that looks like downloading a picture, but in fact downloads and starts an executable with malware. Note that file...
CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14
CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14. A patched version of the package is available...
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2025-1787)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7
CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7. A patched version of the package is available...