EUVD-2023-0414

Malicious code in bioql PyPI...

EUVD-2023-46370

Malicious code in bioql PyPI...

EUVD-2024-2344

Malicious code in bioql PyPI...

EUVD-2022-27693

Malicious code in bioql PyPI...

CVE-2025-61622

creationtimestamp| type| source ---|---|--- 2025-09-29 12:21:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/229 2025-09-29 14:56:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lzybg6twzd2o 2025-10-01 11:24:40+00:00| seen|...

Our plan for a more secure npm supply chain

Open source software is the bedrock of the modern software industry. Its collaborative nature and vast ecosystem empower developers worldwide, driving efficiency and progress at an unprecedented scale. This scale also presents unique vulnerabilities that are continually tested and under attack by...

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in version 1.0 of SourceCodester Pet Grooming Management Software, which stems from an incorrect manipulation of the parameter barcode in the file...

Malicious code in @nativescript-community/ui-material-bottom-navigation (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c1599f8fe4dad02bc9f083f9d6c3af166818ba3a80e2bb13c37a4052f581b81c This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

CVE-2025-38501

creationtimestamp| type| source ---|---|--- 2025-09-15 08:28:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51671 2025-09-15 09:21:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51682 2025-09-15 11:00:09+00:00| published-proof-of-concept|...

wazuh

This repository is an open-source security platform called Wazuh, which provides unified XDR and SIEM protection for endpoints and cloud workloads. The repository contains various files and templates for issue reporting, testing, and integration with external services. The probable entry points f...

Malicious code in prebid-universal-creative (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 28a458913f2a945444606a3dd030b993b23a6388274a01a2ecdea26478e1b1d9 This package was compromised and malicious code added as part of a phishing campaign...

MAL-2025-47026 Malicious code in prebid (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 14e7380eb0ee7e6be1b7896f1a961c6f7282199fcce42017c4003fc73695ee52 This package was compromised and malicious code added as part of a phishing campaign...

MAL-2025-47025 Malicious code in @coveops/abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 75499720f09aaa0ee53321facfb199f2c3234acabc101127ae22bbd4fa90bb1d This package was compromised and malicious code added as part of a phishing campaign...

CVE-2025-58145

creationtimestamp| type| source ---|---|--- 2025-09-09 10:05:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/158 2025-09-11 16:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyl7owlndo2g...

18 Popular Code Packages Hacked, Rigged to Steal Crypto

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved in maintaining the projects was phished. The attack appears to have been quickly contained and was...

GHSA-V2C8-VQQP-HV3G

creationtimestamp| type| source ---|---|--- 2025-09-05 22:31:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/150 2025-09-05 22:31:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/150 2025-09-05 22:31:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/150 2025-09-05 22:31:13+00:00| seen...

Malicious code in collabs-influencer-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 313990126cb820aa31d04033f63105e8a07118c14e0ec49cd4ce0c67c1f60c47 The OpenSSF Package Analysis project identified 'collabs-influencer-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2017-2966

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:13+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Malicious code in @callcenter-frontend/services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f985946c9433e8dec885ea60292e121e23ac3d9bbfe2f1cae80882b85ce1c29e The OpenSSF Package Analysis project identified...