Malicious code in @atlisp/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f4a9667f0a13220de9b838fde4fc16bd5aaa7f79d91f1122725e4799582515 The package's MCP server auto-injects a LISP bootstrap into every CAD command sent through cadSend/cadSendWithResult, plus connectcad's initAtlisp an...

CVE-2026-27752 SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain...

CVE-2026-27752: Cleartext Transmission of Sensitive Information

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain...

CVE-2019-12820

A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account,...

Exploit for Download of Code Without Integrity Check in Nicehash Quickminer

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash...

EUVD-2012-2553

Malware in sbrugna...

EUVD-2019-4401

Malware in sbrugna...

EUVD-2007-1166

Malware in sbrugna...

EUVD-2018-0415

Malware in sbrugna...

EUVD-2017-8075

Malware in sbrugna...

EUVD-2012-2156

Malware in sbrugna...

EUVD-2020-29657

Malware in sbrugna...

EUVD-2019-7277

Malware in sbrugna...

EUVD-2019-7073

Malware in sbrugna...

EUVD-2022-28960

Malicious code in bioql PyPI...

EUVD-2025-18665

Malicious code in bioql PyPI...

EUVD-2023-12407

Malicious code in bioql PyPI...

EUVD-2021-8401

Malicious code in bioql PyPI...

CVE-2025-48463 Unencrypted HTTP Communication

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering...

CVE-2025-48463: Cleartext Storage of Sensitive Information

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering...