CVE-2025-59889

Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center...

MAL-2025-48507 Malicious code in spot-electron-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

EUVD-2020-26478

Malware in sbrugna...

EUVD-2020-30055

Malware in sbrugna...

EUVD-2020-12660

Malware in sbrugna...

MAL-2025-48358 Malicious code in codat-snippets (npm)

The package communicates with a domain associated with malicious activity...

EUVD-2025-31020

Malicious code in bioql PyPI...

EUVD-2022-0445

Malicious code in bioql PyPI...

EUVD-2024-2148

Malicious code in bioql PyPI...

EUVD-2023-2296

Malicious code in bioql PyPI...

EUVD-2025-29854

Malicious code in bioql PyPI...

EUVD-2025-32174

Malicious code in bioql PyPI...

Malicious code in tikweb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 56e420aab6cf451bf10ab865d2950af02e45914f0a7618355f7ee8384ddcd858 This malicious package claims to interact with TikTok web features programmatically, but runs malicious obfuscated code upon import and via other...

MAL-2025-47630 Malicious code in com.unity.gis.high-precision-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an inf...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

MAL-2025-47579 Malicious code in altoqitec-login-integrado-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36e8fa2ecf486300b0bbfb8d83e585407f8717849e9e2b0c12da3147caca1d87 The OpenSSF Package Analysis project identified...

A Dangerous Worm Is Eating Its Way Through Software Packages

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two more alleged members of the Scattered Spider hacking group were arrested...

Malicious code in lynx-explorer (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...