1032 matches found
Malicious code in telstraprogrammablenetworkapilib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd4e014618431bb6a2575fa310e46d678de61362a3b66087427582c4ac2a972 The package telstraprogrammablenetworkapilib was found to contain malicious code. Source: ossf-package-analysis...
Fedora: Security Advisory (FEDORA-2025-bf271e904b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2025:15654-1 git-bug-0.10.1-2.1 on GA media
These are all security issues fixed in the git-bug-0.10.1-2.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2025-33946
Malicious code in mad-1.2.5.2.2.8 npm...
OPENSUSE-SU-2025:15619-1 gitea-tea-0.11.0-2.1 on GA media
These are all security issues fixed in the gitea-tea-0.11.0-2.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2021-0643
Malware in sbrugna...
EUVD-2017-0261
Malware in sbrugna...
EUVD-2020-0922
Malware in sbrugna...
EUVD-2015-1580
Malware in sbrugna...
EUVD-2021-1216
Malware in sbrugna...
EUVD-2023-0867
Malicious code in bioql PyPI...
EUVD-2022-7403
Malicious code in bioql PyPI...
EUVD-2022-6225
Malicious code in bioql PyPI...
Malicious code in zeitwerk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acaf25aadd93141e9b88e577ad36d4e831f5fa1fbe92d0e8a97fa23404a75214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @pc-analytics-filter/core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfc2209384455df77ab889ef6aa71c136ff6c7c2f43bb529d93568e71917d2f Any computer that has this package installed or running should be considered...
flowise (>=2.0.0, <=2.2.8) potentially affected by unknown CVE via flowise-components (2.2.8)
flowise-components NPM version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flowise-components and may be impacted: - flowise =2.0.0, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-12878598...
@manniwatch/client-desktop (>=0.30.0, <=0.30.1), @manniwatch/client-ng (>=0.30.0, <=0.30.1) +2 more potentially affected by CVE-2025-59052 via @angular/ssr (>=19.0.5, <=19.2.1)
@angular/ssr NPM version =19.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack
Multiple npm packages have been compromised as part of a software supply chain attack after a maintainer's account was compromised in a phishing attack. The attack targeted Josh Junon aka Qix, who received an email message that mimicked npm "[email protected]", urging them to update their update...
MAL-2025-42147 Malicious code in file-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9d9ac2b90c17d04ff56afe81a886e99665eb55048e7cc7c9a3f0b1855db828 The OpenSSF Package Analysis project identified 'file-dependency' @ 7.0.1 npm as malicious. It is considered malicious because: - The package...