Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...

EUVD-2025-37084

Malicious code in epic-ui-test npm...

MAL-2025-49209 Malicious code in epic-ui-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87008c3019a736aaf9fe8fec661aed5e8fd5948a8c9fe39b42f70e277948de7a The package epic-ui-test was found to contain malicious code...

MAL-2025-49210 Malicious code in epic-ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70949be3dd1355e16392906c6422a9ddb025a8bddeecd89cf7911365e43670e The package epic-ui-toolkit was found to contain malicious code...

MAL-2025-49117 Malicious code in epic-angular-ui-codemirror (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475aba8f9dc17e38dcf35a7e5607ccc07a0b4e095aa0957ee57fdc75d0d4ee8d The package epic-angular-ui-codemirror was found to contain malicious code...

Malicious code in epic-ui-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87008c3019a736aaf9fe8fec661aed5e8fd5948a8c9fe39b42f70e277948de7a The package epic-ui-test was found to contain malicious code...

Malicious code in epic-asset-uploader-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168bca602c07dee020253d5302f18b0f0f5fb783801ac20450da5073f282042b The package epic-asset-uploader-ui was found to contain malicious code...

Malicious code in epic-angular-ui-codemirror (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475aba8f9dc17e38dcf35a7e5607ccc07a0b4e095aa0957ee57fdc75d0d4ee8d The package epic-angular-ui-codemirror was found to contain malicious code...

MAL-2025-49234 Malicious code in player-support-tools-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code...

Malicious code in epic-ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70949be3dd1355e16392906c6422a9ddb025a8bddeecd89cf7911365e43670e The package epic-ui-toolkit was found to contain malicious code...

EUVD-2025-37176

Malicious code in epic-angular-ui-codemirror npm...

MAL-2025-49105 Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...

CVE-2025-46363

Dell Secure Connect Gateway SCG 5.0 Application and Appliance versions 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API if this REST API is enabled by Admin user from UI. A low privileged attacker with remote...

CVE-2025-46363

Dell Secure Connect Gateway SCG 5.0 Application and Appliance versions 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API if this REST API is enabled by Admin user from UI. A low privileged attacker with remote...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: kserve, open-webui, k8s-sidecar, mlflow, reflex, airflow...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: nemo, reflex, k8s-sidecar, open-webui, airflow-core, kserve, airflow, mlflow...

CVE-2025-54941

An example dag exampledagdecorator had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker. This however required that the example dags are enabled in production not default or the example dag code copied to build your own...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI CCM versions prior to 3.1.0 and Nagios XI version 5.8.0, which...

Malicious code in xo-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58815a099f64599f6c8c7778c42dc78094abeace3c685c538fe1ee5604b86818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview xo-ui-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...