EUVD-2025-39051

Malicious code in hanafi-tiwul29-sukiwir npm...

EUVD-2025-43982

Malicious code in gita-telur80-sluey npm...

EUVD-2025-43489

Malicious code in lutfi-otak-otak8-miaww npm...

EUVD-2025-38743

Malicious code in ocha-sroto99-apidev npm...

EUVD-2025-43197

Malicious code in nurul-sego2-ruro npm...

EUVD-2025-43348

Malicious code in nadia-miebogor86-sluey npm...

CVE-2025-12928

creationtimestamp| type| source ---|---|--- 2025-11-10 04:16:16+00:00| seen| https://bsky.app/profile/potato.software/post/3m5ar7hfs422f 2025-11-10 06:20:29+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5ay56zekcc2...

EUVD-2025-39782

Malicious code in eko-semur91-ruro npm...

EUVD-2025-40648

Malicious code in andi-sambel1-sukiwir npm...

EUVD-2025-40829

Malicious code in vera-sasag92-sumpek npm...

EUVD-2025-39778

Malicious code in eko-tempe28-miaww npm...

EUVD-2025-41203

Malicious code in dono-tek26-miaww npm...

EUVD-2025-39946

Malicious code in dewi-rujaksoto45-breki npm...

EUVD-2025-41678

Malicious code in andi-semur44-breki npm...

Malicious code in bamboo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913210ebd3bdb67c851e13118eff395e1df72403e313fcedfa4a1e9d4253746b The package bamboo-init was found to contain malicious code...

EUVD-2025-41534

Malicious code in budi-empal24-ruro npm...

Critical: lasso

Issue Overview: A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. CVE-2025-4640...

编号撤回

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

PT-2025-46139

Name of the Vulnerable Software and Affected Versions Malware Remover versions prior to 6.6.8.20251023 Description Improper control of code generation allows remote attackers to perform code injection, leading to remote code execution and the ability to bypass protection mechanisms. Recommendatio...

Important: xmlunit

Issue Overview: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled. CVE-2024-31573 Affected Packages: xmlunit Issue Correction: Run dnf update xmlunit...