EUVD-2024-20892

Malicious code in bioql PyPI...

EUVD-2022-48032

Malicious code in bioql PyPI...

EUVD-2022-32048

Malicious code in bioql PyPI...

EUVD-2021-6777

Malicious code in bioql PyPI...

EUVD-2023-12192

Malicious code in bioql PyPI...

EUVD-2024-3500

Malicious code in bioql PyPI...

EUVD-2022-33309

Malicious code in bioql PyPI...

EUVD-2023-0248

Malicious code in bioql PyPI...

EUVD-2024-15814

Malicious code in bioql PyPI...

EUVD-2022-46562

Malicious code in bioql PyPI...

EUVD-2025-20796

Malicious code in bioql PyPI...

EUVD-2024-0923

Malicious code in bioql PyPI...

EUVD-2023-49024

Malicious code in bioql PyPI...

EUVD-2022-44965

Malicious code in bioql PyPI...

CVE-2024-58267 Rancher CLI SAML authentication is vulnerable to phishing attacks

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens...

CVE-2024-58267 Rancher CLI SAML authentication is vulnerable to phishing attacks

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens...

PT-2025-39664

Name of the Vulnerable Software and Affected Versions Rancher Manager versions prior to 2.9.12 Rancher Manager versions prior to 2.10.10 Rancher Manager versions prior to 2.11.6 Rancher Manager versions prior to 2.12.2 Description Rancher Manager is susceptible to phishing attacks targeting SAML...

SUSE CVE-2024-58267

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher's authentication tokens...

CVE-2025-59162

color-convert provides plain color conversion functions in JavaScript. On 8 September 2025, the npm publishing account for color-convert was taken over after a phishing attack. Version 3.1.1 was published, functionally identical to the previous patch version, but with a malware payload added...

CVE-2025-59143

color is a Javascript color conversion and manipulation library. On 8 September 2025, the npm publishing account for color was taken over after a phishing attack. Version 5.0.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to...