EUVD-2025-30128

Malicious code in bioql PyPI...

Malicious code in @teselagen/react-table (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35f0735aa86d1091b1512a81fb01bb052f137bb071faaadd8c7e0713abac239b Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47278 Malicious code in @teselagen/react-table (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35f0735aa86d1091b1512a81fb01bb052f137bb071faaadd8c7e0713abac239b Any computer that has this package installed or running should be considered fully compromised. All...

@opencloning/opencloning-elabftw (>=1.6.0 <=1.7.3), @opencloning/ui (>=1.0.1 <=1.7.3) +7 more potentially affected by unknown CVE via @teselagen/react-table (>=6.10.13 <=6.10.18)

@teselagen/react-table NPM version =6.10.13, =1.6.0, =1.0.1, =0.0.15, =0.0.14, =0.5.7, =10.1.61, =18.3.6, =28.0.0, =30.15.8 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENREACTTABLE-12743716...

@opencloning/opencloning-elabftw (>=1.6.0 <=1.7.3), @opencloning/ui (>=1.0.1 <=1.7.3) +8 more potentially affected by unknown CVE via @teselagen/react-list (>=0.8.16 <=0.8.18)

@teselagen/react-list NPM version =0.8.16, =1.6.0, =1.0.1, =0.0.15, =6.10.1, =0.0.14, =0.5.7, =10.1.14, =18.3.6, =28.0.0, =30.15.8 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENREACTLIST-12744522...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...