EUVD-2025-48597

Malicious code in bella-mangga85-sukiwir npm...

EUVD-2025-47875

Malicious code in erick-rangi1-sukiwir npm...

EUVD-2025-41807

Malicious code in siska-donat54-tititugel npm...

EUVD-2025-42265

Malicious code in qori-moci98-miaww npm...

EUVD-2025-42663

Malicious code in patria-enting48-sluey npm...

EUVD-2025-42202

Malicious code in riana-martabak47-kyuki npm...

EUVD-2025-39181

Malicious code in wati-martabak48-riris npm...

EUVD-2025-40637

Malicious code in andi-telurtahu76-sukiwir npm...

EUVD-2025-39872

Malicious code in dono-lupis81-breki npm...

EUVD-2025-40031

Malicious code in citra-rangi76-riris npm...

EUVD-2025-38695

Malicious code in xaver-nasi55-sluey npm...

@ai-sdk/angular (>=1.1.0-beta.0 <=1.1.0-beta.28), @ai-sdk/langchain (>=1.1.0-beta.0 <=1.1.0-beta.28) +5 more potentially affected by CVE-2025-48985 via ai (>=5.1.0-beta.0 <=5.1.0-beta.8)

ai NPM version =5.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =2.1.0-beta.0, =1.1.0-beta.0, =3.1.0-beta.0, =2.1.0-beta.0, =2.1.0-beta.28 Source cves: CVE-2025-48985 Source advisory: SNYK:JS-AI-13863465...

a-mailx (=0.1.0), a2a-client-handler (=0.1.0) +263 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (>=1.0.12 <=2.1.2)

langgraph-checkpoint PYPI version =1.0.12, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.2.0a1, =0.2.5a2, =0.0.3rc0, =0.8.0, =0.1.0, =0.1.37 and more Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

MAL-2025-191654 Malicious code in pygments-richstyle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a965f61b1e51e6c96a8987633eaf2f23001320e4c6b884c33603230c66798e74 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

EUVD-2025-37113

Malicious code in epic-react-carousel npm...

EUVD-2025-37057

Malicious code in react-router-kitt npm...

EUVD-2025-36415

Malicious code in energy-portal npm...

Linux Distros Unpatched Vulnerability : CVE-2025-58147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can...

EUVD-2025-35762

Malicious code in mender-setup npm...

MAL-2025-48791 Malicious code in ads-skeleton (npm)

--- -= Per source details. Do not edit below this line.=-...