EUVD-2024-22172

Malicious code in bioql PyPI...

Malicious Package

Overview @team-event/v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @team-event/services is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @team-event/models is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47050 Malicious code in @team-event/team-event-amplitude-events (npm)

The package @team-event/team-event-amplitude-events was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fec4944bd01591db16329984b9a3301e3d76ea26f8ec3f5dc1a14807f9c11ff6 Any computer that has this package installed or running should b...

Malicious code in @team-event/models (npm)

The package @team-event/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6769b5703bfb1b74cb1db2c7bf3e87a4abfcc35e4e3fd588c284080cb96583e2 Any computer that has this package installed or running should be considered fully...

Malicious code in @team-event/services (npm)

The package @team-event/services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc63f4d31ebe9d65d548b1000719f57dc3476e34a98f87c0dab3ab0c62322b06 Any computer that has this package installed or running should be considered fully...

MAL-2025-47049 Malicious code in @team-event/services (npm)

The package @team-event/services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc63f4d31ebe9d65d548b1000719f57dc3476e34a98f87c0dab3ab0c62322b06 Any computer that has this package installed or running should be considered fully...

Malware in @team-event/services

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @team-event/models

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @team-event/team-event-amplitude-events

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @team-event/v2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47051 Malicious code in @team-event/v2 (npm)

The package @team-event/v2 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc9d7a4f41e5d6a4af9a15c05d4e0023f5f141a75b5c62d116bb229a1ea7541d Any computer that has this package installed or running should be considered fully...

MAL-2025-47048 Malicious code in @team-event/models (npm)

The package @team-event/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6769b5703bfb1b74cb1db2c7bf3e87a4abfcc35e4e3fd588c284080cb96583e2 Any computer that has this package installed or running should be considered fully...

CVE-2024-49703 WordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magepeopleteam WpEvently mage-eventpress.This issue affects WpEvently: from n/a through = 4.2.5...

CVE-2024-49703 WordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magepeopleteam WpEvently mage-eventpress.This issue affects WpEvently: from n/a through = 4.2.5...

CVE-2024-49703

CVE-2024-49703 affects the WordPress plugin Event Manager for WooCommerce (MagePeople) up to version 4.2.5. It is a Stored XSS caused by improper input neutralization during web page generation. Impact: stored cross‑site scripting vulnerability (Medium severity; CVSS 3.1 base score 6.5). Remediat...

CVE-2024-43138 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1...

CVE-2024-43138: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1...

CVE-2024-24796

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1...