PT-2025-49107

Name of the Vulnerable Software and Affected Versions Step CA affected versions not specified Description A critical issue in Step CA allows for unauthenticated bypass, enabling the issuance of fraudulent certificates. This compromises trust in potentially millions of sites. The issue allows...

CVE-2025-59694

creationtimestamp| type| source ---|---|--- 2025-12-02 19:11:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6znj62ehc2j...

CVE-2025-13090

creationtimestamp| type| source ---|---|--- 2025-12-02 12:45:40+00:00| seen| https://gist.github.com/Darkcrai86/b0720f6ed781c2ba28b81c4568d91369 2025-12-02 13:05:52+00:00| seen| https://gist.github.com/Darkcrai86/37799552428eb90991f79b05f8f62984...

EUVD-2025-200194

Malicious code in ddos-l7 npm...

Malicious Package

Overview multer-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in privy-farcaster-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c7eee6179f85bcc2beaf0d3637f35c0a626b6db6222c86af862a01e01645e1 The package privy-farcaster-demo was found to contain malicious code...

Malicious code in privy-frames-v2-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50804c5abc715a96e6683f67c970ed8e06d949cce42d57ac7d8754c9633ad685 The package privy-frames-v2-demo was found to contain malicious code...

MAL-2025-191528 Malicious code in telesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acbf28efb6fa8452a846fc5d9517c32242464a4add69649d72a465b7f48ee60 The package telesis was found to contain malicious code...

Malicious code in mongodb-atlas-cli-toc-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43eaf31369a3ecfac60651fb3c08bc314680fd9b476179d902bbfee64b0d62 The package mongodb-atlas-cli-toc-generator was found to contain malicious code...

MAL-2025-191509 Malicious code in debug-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f2a76a5ede2df04c7d9b90d9fe0164f99a388aaf4ba018dc9b40f2b794d967 The package debug-common was found to contain malicious code...

EUVD-2025-200010

Malicious code in m365-action-sdk npm...

MAL-2025-191502 Malicious code in pluxee-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701f52cd229baaf8a44c372915a6bdbcc5510c156fb75c21d23c932d51ccde2f The package pluxee-design-system was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191582 Malicious code in react-mandes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8242aeb2b6b10985e7b4c0a35cb731d81095b7f039aea2886d0c4c35ffa5d9ea The package react-mandes was found to contain malicious code...

MAL-2025-191574 Malicious code in eslint-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e5339ebcf037bec59b58b4622230d6f22619a009685877e469b566e883248a The package eslint-lodash was found to contain malicious code...

CVE-2025-13806

creationtimestamp| type| source ---|---|--- 2025-12-01 04:33:49+00:00| seen| https://infosec.exchange/users/offseq/statuses/115642441906765257...

CVE-2025-66027

creationtimestamp| type| source ---|---|--- 2025-11-29 10:33:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/115632532223407853...

CVE-2025-13742

creationtimestamp| type| source ---|---|--- 2025-11-27 12:51:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6mfvwpiba2s...

CERTFR-2025-ACT-051

creationtimestamp| type| source ---|---|--- 2025-11-27 09:18:51+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115620913416794951...

PT-2025-48241

Name of the Vulnerable Software and Affected Versions Apache SkyWalking versions prior to 10.3.0 Description The software contains an Improper Neutralization of Script-Related HTML Tags in a Web Page issue, also known as a Basic Cross-Site Scripting XSS flaw. This allows attackers to inject...

CVE-2025-66035

creationtimestamp| type| source ---|---|--- 2025-11-26 23:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyg7f3d42u 2025-11-27 02:23:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6lctzvqqy2s 2025-11-27 22:22:55+00:00| seen|...