EUVD-2025-122382

Malicious code in run-script-changelog-publish-canopus npm...

EUVD-2025-121687

Malicious code in sqlite-run-script-transform-cordelia npm...

Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124120

Malicious code in odin-run-script-scripts-bootstrap npm...

EUVD-2025-122367

Malicious code in run-script-vuepress-bootes-enceladus npm...

EUVD-2025-111618

Malicious code in local-run-script-ophiuchus-global npm...

EUVD-2025-121645

Malicious code in start-run-script-sagitta-proxima npm...

EUVD-2025-120503

Malicious code in websockets-run-script-websockets-mira npm...

EUVD-2025-120568

Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...

EUVD-2025-116099

Malicious code in betelgeuse-run-script-remark-halley npm...

EUVD-2025-123744

Malicious code in phoebe-run-script-subscription-karma npm...

EUVD-2012-4054

Malware in sbrugna...

Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

Malicious code in run-script-ganymede-npm-miranda (npm)

The package run-script-ganymede-npm-miranda was found to contain malicious code...

MAL-2025-45935 Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-50636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMOL 2.5.0 contains a vulnerability in its Run Script function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can...

Remote Code Execution (RCE)

ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization because yaml.load from PyYAML is used in tests/run.py, allowing attackers to execute arbitrary code via a crafted YAML configuration file...

Malicious code in run-script-bootes-lithosphere-electron-builder (npm)

The package run-script-bootes-lithosphere-electron-builder was found to contain malicious code...

Malicious code in extremophile-venus-neptune-run-script (npm)

The package extremophile-venus-neptune-run-script was found to contain malicious code...

Malicious code in biotechnology-parsec-cosmiconfig-run-script (npm)

The package biotechnology-parsec-cosmiconfig-run-script was found to contain malicious code...