696 matches found
Command Injection
Overview cli-onprem is a CLI tool for infrastructure engineers Affected versions of this package are vulnerable to Command Injection due to the use of shell-invoked subprocess calls with unvalidated input. An attacker can execute arbitrary commands by injecting shell metacharacters in the directo...
EUVD-2019-3811
Malware in sbrugna...
EUVD-2021-13177
Malware in sbrugna...
EUVD-2022-4111
Malicious code in bioql PyPI...
EUVD-2024-3454
Malicious code in bioql PyPI...
EUVD-2025-11262
Malicious code in bioql PyPI...
EUVD-2022-25084
Malicious code in bioql PyPI...
EUVD-2023-3035
Malicious code in bioql PyPI...
EUVD-2024-45935
Malicious code in bioql PyPI...
Malicious code in sha256-validation-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3290610bb31bf5689be7241b664ae5eb52b47b834fff3e2597c5ab75d88c4bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sha256-validation-xyz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47522 Malicious code in sha256-validation-xyz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47429 Malicious code in @bonk-sdk/sha256 (npm)
The package @bonk-sdk/sha256 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @bonk-sdk/sha256 (npm)
The package @bonk-sdk/sha256 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in valid-sha256 (npm)
The package valid-sha256 was found to contain malicious code...
MAL-2025-42107 Malicious code in valid-sha256 (npm)
The package valid-sha256 was found to contain malicious code...
Malicious code in sha256-validator-pro (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41604 Malicious code in sha256-validator-pro (npm)
--- -= Per source details. Do not edit below this line.=-...