Malicious code in brunomenozzi-test-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06729f2b798e8015cdd50f9f6f1915a4d3ef45ebd8da4f67d9c8917fbf6188c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview brunomenozzi-test-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in smtp-test-server-node (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7422 Malicious code in smtp-test-server-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-chain-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7242 Malicious code in chai-chain-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7240 Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2026-33264 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2026-33264 Source advisory:...

Malicious code in southwark-test-f8e1778549558 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8848 Malicious code in southwark-test-f8e1778549558 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in southnews-test-35329 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8836 Malicious code in southnews-test-35329 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7601 Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7600 Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1168 Apache Superset has improper default REST API permission for Gamma users

An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections...

Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox

ImpactKiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introducedchanges which were meant to serve all uploaded files as plain text in order to prevent browsers from executing potentially dangerous files when such files are accessed...

delft (>=0.2.3, <=0.2.4), keras-textclassification (0.1.6) +10 more potentially affected by CVE-2023-25672 via tensorflow-gpu (1.12.0)

tensorflow-gpu PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - delft =0.2.3, =0.0.1, =0.0.1, =0.0.2 - monk-keras-cuda92 0.0.1 - monk-keras-cuda92-test 0.0.1 Source cves: CVE-2023-25672 Source...