1502 matches found
MAL-2025-9630 Malicious code in @waitfortea2024/id-numquam-harum (npm)
The package @waitfortea2024/id-numquam-harum was found to contain malicious code...
Malicious code in @zalastax/nolb-apiy (npm)
The package @zalastax/nolb-apiy was found to contain malicious code...
Malicious code in xenon_rwvev_yuwah_xylophone (npm)
The package xenonrwvevyuwahxylophone was found to contain malicious code...
Malicious code in almond-kale-ywzb (npm)
The package almond-kale-ywzb was found to contain malicious code...
decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-8747 via keras (>=3.0.0 <=3.10.0)
keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-8747 Source advisory: SNYK:PYTHON-KERAS-11775502...
CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18
CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...
CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
MAL-2025-6775 Malicious code in undeface-test-1 (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
CVE-2025-54956 affects the R package gh (pre-1.5.0). The vulnerability arises when an HTTP response is constructed to include the request’s Authorization header, potentially exposing credentials. Several connected advisories confirm the issue and provide mitigations: Debian LTS DLA-4378-1 notes a...
MAL-2025-6670 Malicious code in z0rsdumbtestnonshould (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6653 Malicious code in schematics-cli (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6652 Malicious code in sajarilib (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6420 Malicious code in frontend-feature-flags (npm)
--- -= Per source details. Do not edit below this line.=-...