277 matches found
CVE-2025-33240
NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...
CVE-2025-33239
NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...
Malicious Package
Overview nrql-tutorial is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2019-7091
Malware in sbrugna...
EUVD-2008-4331
Malware in sbrugna...
EUVD-2007-3675
Malware in sbrugna...
EUVD-2021-28064
Malicious code in bioql PyPI...
EUVD-2021-29305
Malicious code in bioql PyPI...
This Week in Spring - September 9th, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! I am home, ensconced in my studio here in somewhat sunny San Francisco, California, relaxing and trying to catch up on stuff I missed. As always, there's a ton! So let's dive right into it. Some of the amazing features that...
Malicious code in heft-storybook-react-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aaa15f8740a436b59266355d59bb470dfd605d6260dc307a40ef50e20f65939 The OpenSSF Package Analysis project identified 'heft-storybook-react-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...
Malicious code in heft-web-rig-library-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5305ed5a8b702f1ebff37fd77c6a498586782cc76fa0f351f18c6ad13efdd194 The OpenSSF Package Analysis project identified 'heft-web-rig-library-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...
MAL-2025-41296 Malicious code in heft-web-rig-library-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5305ed5a8b702f1ebff37fd77c6a498586782cc76fa0f351f18c6ad13efdd194 The OpenSSF Package Analysis project identified 'heft-web-rig-library-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...
MAL-2025-37183 Malicious code in trello-power-up-tutorial-part-one (npm)
The package trello-power-up-tutorial-part-one was found to contain malicious code...
Malicious code in trello-power-up-tutorial-part-one (npm)
The package trello-power-up-tutorial-part-one was found to contain malicious code...
Malicious code in node-sqlite-fly-tutorial (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6742 Malicious code in node-sqlite-fly-tutorial (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-34095
An OS command injection exists in Real Time Logic Mako Server v2.5 and v2.6 via the examples/save.lsp tutorial interface. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is persisted on disk and later executed when a GET is issued to ex...
Using Signal Groups for Activism
Good tutorial by Micah Lee. It includes some nonobvious use cases...
Malicious code in tickets-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9377af3ff9889209078306e2ccd858a9c161cb6aaa6f315d355fd1d797abe26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5733 Malicious code in tickets-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9377af3ff9889209078306e2ccd858a9c161cb6aaa6f315d355fd1d797abe26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...