7627 matches found
Improper Warning Message Handling
@anthropic-ai/claude-code is vulnerable to improper warning message handling. The vulnerability is due to an unclear trust prompt that failed to inform users that selecting “Yes, proceed” would execute files in the folder without further confirmation, which allows an attacker to trick users into...
Why Software Signing (Still) Matters: Trust Boundaries in the Software Supply Chain
Software signing provides a formal mechanism for provenance by ensuring artifact integrity and verifying producer identity. It also imposes tooling and operational costs to implement in practice. In an era of centralized registries such as PyPI, npm, Maven Central, and Hugging Face, it is...
EUVD-2022-42881
Malicious code in bioql PyPI...
EUVD-2025-29191
Malicious code in bioql PyPI...
EUVD-2023-56783
Malicious code in bioql PyPI...
EUVD-2025-19960
Malicious code in bioql PyPI...
EUVD-2023-2025
Malicious code in bioql PyPI...
EUVD-2025-24253
Malicious code in bioql PyPI...
EUVD-2025-19126
Malicious code in bioql PyPI...
EUVD-2022-36300
Malicious code in bioql PyPI...
EUVD-2025-27281
Malicious code in bioql PyPI...
EUVD-2025-19667
Malicious code in bioql PyPI...
EUVD-2023-25410
Malicious code in bioql PyPI...
EUVD-2024-49540
Malicious code in bioql PyPI...
EUVD-2025-31020
Malicious code in bioql PyPI...
EUVD-2021-28625
Malicious code in bioql PyPI...
EUVD-2022-33174
Malicious code in bioql PyPI...
EUVD-2022-0134
Malicious code in bioql PyPI...