PT-2026-35643

Name of the Vulnerable Software and Affected Versions LiteLLM versions 1.81.16 through 1.83.6 Description An unauthenticated pre-auth SQL injection exists in the proxy API key verification process. The issue occurs because a database query mixes caller-supplied values directly into the query text...

EUVD-2025-102128

Malicious code in sophisticatedminkz3n npm...

EUVD-2025-102126

Malicious code in sophisticatedtoucanz3n npm...

EUVD-2025-88710

Malicious code in sophisticatedstoatz3n npm...

EUVD-2025-78271

Malicious code in sophisticatedbedbugz3n npm...

EUVD-2025-80511

Malicious code in sophisticatedcaribou0xrequest npm...

EUVD-2025-73621

Malicious code in sophisticatedcougarz3n npm...

EUVD-2025-73620

Malicious code in sophisticatedsilkwormz3n npm...

EUVD-2025-66543

Malicious code in sophisticatedbovidz3n npm...

EUVD-2025-51934

Malicious code in sophisticated-indigo-echidna npm...

EUVD-2025-51932

Malicious code in sophisticated-lavender-echidna npm...

Malicious code in sophisticated-tomato-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63eb5d2aad6327dcd081ba9e3b2132bfae519926663c5977f42cbdbb469eac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51931

Malicious code in sophisticated-tomato-kiwi npm...

EUVD-2025-57230

Malicious code in sophisticatedmarsupialz3n npm...

EUVD-2025-57231

Malicious code in sophisticatedleopardz3n npm...

MAL-2025-58753 Malicious code in sophisticated_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e126c4247aa88b035eec1879091b5749f80d760d0eb330981ff8b05d88dd59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45222

Malicious code in sophisticatedmolluskz3n npm...

EUVD-2024-48239

Malicious code in bioql PyPI...

CVE-2025-43300

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious imag...

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

Apple has disclosed that a now-patched security flaw present in its Messages app was actively exploited in the wild to target civil society members in sophisticated cyber attacks. The vulnerability, tracked as CVE-2025-43200, was addressed on February 10, 2025, as part of iOS 18.3.1, iPadOS 18.3....