Malicious code in mahesa-rangi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fae9441627ecdaf9bbb32128173eb812dc28f1a14a270e36b38346f3fd835d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-44830

Malicious code in bioql PyPI...

PT-2024-34148 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.6 SuiteCRM versions prior to 8.7.1 Description: The issue arises due to insufficient input validation and sanitization of the Publish Key field within the SuiteCRM application, allowing an attacker to inject...