Malicious code in tikweb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 56e420aab6cf451bf10ab865d2950af02e45914f0a7618355f7ee8384ddcd858 This malicious package claims to interact with TikTok web features programmatically, but runs malicious obfuscated code upon import and via other...

MAL-2025-47630 Malicious code in com.unity.gis.high-precision-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an inf...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

MAL-2025-47579 Malicious code in altoqitec-login-integrado-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36e8fa2ecf486300b0bbfb8d83e585407f8717849e9e2b0c12da3147caca1d87 The OpenSSF Package Analysis project identified...

A Dangerous Worm Is Eating Its Way Through Software Packages

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two more alleged members of the Scattered Spider hacking group were arrested...

Malicious code in lynx-explorer (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

Malicious code in supply_chain_test_quang (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9374e2a02144addb7ed698eac9189f2c556781a55dd381f4cf4d28d8ae95d07b Any computer that has this package installed or running should be considered...

GHSA-GVGC-3CH5-PX8P vulnerabilities

Vulnerabilities for packages: tiff...

DSA-6000-1 libcpanel-json-xs-perl - security update

Bulletin has no description...

Malicious code in @zalastax/nolb-_neg (npm)

The package @zalastax/nolb-neg was found to contain malicious code...

Malicious code in @teamteanpm2024/ipsa-dignissimos-consequatur (npm)

The package @teamteanpm2024/ipsa-dignissimos-consequatur was found to contain malicious code...

Malicious code in cosmology-browserify-blazar-greatfilter (npm)

The package cosmology-browserify-blazar-greatfilter was found to contain malicious code...

Malicious code in fauzi-ikan45-breki (npm)

The package fauzi-ikan45-breki was found to contain malicious code...

Malicious code in xingdu-wuyu (npm)

The package xingdu-wuyu was found to contain malicious code...

Malicious code in karma-europa-australis-prompts (npm)

The package karma-europa-australis-prompts was found to contain malicious code...

Malicious code in patria-enting33-breki (npm)

The package patria-enting33-breki was found to contain malicious code...

Malicious code in wati-buburayam55-breki (npm)

The package wati-buburayam55-breki was found to contain malicious code...

Malicious code in bunyan-xanadu-spica-pegasus (npm)

The package bunyan-xanadu-spica-pegasus was found to contain malicious code...