EUVD-2023-32006

Malicious code in bioql PyPI...

EUVD-2025-4903

Malicious code in bioql PyPI...

MAL-2025-6665 Malicious code in test-package-avinav (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6417 Malicious code in fasterhttp (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6410 Malicious code in disabled_native_dep (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6626 Malicious code in zlsrc (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6601 Malicious code in thoughtspot-rest-api-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6562 Malicious code in pb-common (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6485 Malicious code in crawl-requests (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6302 Malicious code in rcepoc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6564 Malicious code in pipmodule823 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57b078ffca6f219848df2289282933442be06a2932d0d163ede59fe4a533faca If run as a module, the package downloads and executes a remote script. At the time of check, the remote script was just opening a popup; thus it's not...

DLA-4236-1 mbedtls - security update

Bulletin has no description...

CVE-2025-45333

berkeley-abc abc 1.1 contains a Null Pointer Dereference NPD vulnerability in the AbcNtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

MAL-2025-6470 Malicious code in bulktweetbyref (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6e44fa722cba73a0757878305b8641ff0539e6c32ffff20b9484ce39ce6a1aa Using the function simulates some behavior, but then download and runs an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-6431 Malicious code in alpha-booster (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fe7614b282cfa81278bc61bde1998e286fe7554c1d37b4c3185718c6e54f6af Code downloads and runs the remote executable. While the current link seems not to work, the previous versions had an embedded infostealer instead. --- Categor...

CVE-2025-22605

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version 4.0.0-beta.18 and prior to 4.0.0-beta.253, a vulnerability in the execution of commands on remote servers allows an authenticated user to execute arbitrary code on the local...

MAL-2025-4185 Malicious code in matter_build_action (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4263 Malicious code in web3-checksumm (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4236 Malicious code in pythonbitcoinlib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5130 Malicious code in rich-figlet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b97458c87c8580a9cb2f2edc0af2ae40a36489dafa860102eee0307256cb416b Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...