EUVD-2021-30916

Malicious code in bioql PyPI...

EUVD-2024-54652

Malicious code in bioql PyPI...

The vulnerability of the xmlXIncludeAddNode() function in the xinclude.c file of the libxml2 library allows a attacker to compromise the vulnerable system.

The vulnerability of the xmlXIncludeAddNode function in the xinclude.c file of the libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise a vulnerable system...

MAL-2025-47164 Malicious code in @nstudio/nativescript-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ac10be560243885c47e80e47d545e8006f285d8fe9f5756c7b92f9cd2085639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30278

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central...

MAL-2025-6377 Malicious code in vite-plugin-reactjs-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4abf589cdec43e8ba609988d38155d5965b59ac6a83b1d251405fdf13629cdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6359 Malicious code in cookie-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c94db01436156d78a21b41d74cf372b4e12f89a2480b8986397309b1c4165b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6339 Malicious code in query-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed848ba7a41198ae72f2a0c36d31e627fe5ca7503bae293fe204e3a3dff65620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6243 Malicious code in grafana-internal-config-loader (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031305432de00d5ead02ddc27a8482b7b62a8594c3d2b71961716b00672d654f Any computer that has this package installed or running should be considered...

Malicious code in sha256-validator-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 453f997676ddfb37b97659a39bdc5de8d8c2fc1b070f5feeda72545030850113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6168 Malicious code in internallib_v730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e8e1cdef56b10548337d022340fca1a465be7d7a13b0ec39e4c2193d349102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6087 Malicious code in dewiz-xyz (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73eec59fc359ccdddf7aea6963be27ed045429eae410109c1d749dae6761e51 Any computer that has this package installed or running should be considered...

MAL-2025-6084 Malicious code in creator-portal-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5327398bd579ef0663ef6e1919049ade891f5f0f39b28f9314ce8d3a6040017 Any computer that has this package installed or running should be considered...

MAL-2025-6003 Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5875 Malicious code in @gdcorp-digitalcare/ux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fecefb3206cce5d5e5a87c2c7130d9cffdb74d4b163ca1bc8e14cedd902ae6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5975 Malicious code in what_type_of_self_indulgent_sub-par_challenge_is_this (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3aab675be401e5fe6766b12bc5278c932ac0e97db81223ce0a5b14870dbb558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5714 Malicious code in oneapi-gdb-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6826b05948f6984052fc37700b503547ecb425474cd1e56c4b03926b8e2ffe4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5697 Malicious code in grafana-iot-twinmaker-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f0ee041fd32ff1222732d276760eea9a8547107ad0492a0654088ddfb85381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gdpr-tracker-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8a07210a79f85c1ecd79351c780ee3e0c92be87207480cf11d712ef9aaf0d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5728 Malicious code in service-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13639a3cf6cfa5ada30479eb854ca86c15de5513191baf8a2e81eb33d48c2b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...