EUVD-2022-3935

Malicious code in bioql PyPI...

Duplicate Advisory: Malicious versions of Nx were published

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cxm3-wv7p-598c. This link is maintained to preserve external references. Original Description Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was...

CVE-2025-10894

Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo...

CVE-2025-59416 The Scratch Channel forks can publish articles

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2...

Malicious code in @art-ws/di-node (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b394dcc54d336ef0ffabaf044cf0713eb4d4ffb075cc32163ad8d19967474aba Any computer that has this package installed or running should be considered fully compromised. All...

CVE-2025-40796

creationtimestamp| type| source ---|---|--- 2025-09-09 11:08:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyflcwqxuk2d 2025-09-11 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-07...

CVE-2025-42930

creationtimestamp| type| source ---|---|--- 2025-09-09 05:16:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyexnuafv32l 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...

CVE-2025-55241

creationtimestamp| type| source ---|---|--- 2025-09-05 00:01:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ly2e73m6eu2f 2025-09-05 01:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly2k6umnle2g 2025-09-05 06:27:08+00:00| seen|...

CVE-2025-9219

creationtimestamp| type| source ---|---|--- 2025-09-03 13:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxwpuxnzkv27...

PT-2025-39354

Name of the Vulnerable Software and Affected Versions Nx versions 20.9.0 through 21.8.0 @nx/devkit versions 20.9.0 through 21.5.0 @nx/js versions 20.9.0 through 21.5.0 @nx/workspace versions 20.9.0 through 21.5.0 @nx/node versions 20.9.0 through 21.5.0 @nx/eslint version 21.5.0 @nx/key version...

CVE-2025-9444

creationtimestamp| type| source ---|---|--- 2025-08-26 05:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqpj3wvq2p...

CVE-2025-57805 The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-57805

CVE-2025-57805 affects The Scratch Channel web platform. In versions 1 and 1.1, a POST to the article-publishing endpoint allows posting articles in any category with any date, regardless of login status, indicating an authorization bypass in the publish workflow. The issue has been patched in ve...

PT-2025-34707 · Unknown · Scratch Channel

Name of the Vulnerable Software and Affected Versions: The Scratch Channel versions 1 and 1.1 Description: The Scratch Channel, a news website, is susceptible to unauthorized article posting. A POST request to the article publishing endpoint allows posting articles in any category with any date,...

Malicious Package

Overview postingduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

CVE-2025-2856

creationtimestamp| type| source ---|---|--- 2025-07-06 01:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltb4fy2iax2v...

CVE-2021-12345

creationtimestamp| type| source ---|---|--- 2025-07-06 01:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3ul2nau2i 2026-05-26 15:21:17+00:00| seen| https://gist.github.com/mkrause/9ab4178c905b7e3ab46c5a3e3598adfc...

CVE-2025-6689

creationtimestamp| type| source ---|---|--- 2025-06-27 07:52:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19679 2025-06-27 10:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsli6g4zac2k...

CVE-2025-6662

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-447/ 2025-06-26 00:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshv2ravun2i...

CVE-2019-12263

creationtimestamp| type| source ---|---|--- 2025-06-14 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrltx6r5n32u 2025-08-31 03:00:52+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...