EUVD-2025-23811

Malicious code in bioql PyPI...

EUVD-2023-47109

Malicious code in bioql PyPI...

EUVD-2025-13411

Malicious code in bioql PyPI...

EUVD-2025-18214

Malicious code in bioql PyPI...

EUVD-2024-51798

Malicious code in bioql PyPI...

EUVD-2021-31401

Malicious code in bioql PyPI...

EUVD-2024-39640

Malicious code in bioql PyPI...

EUVD-2024-3213

Malicious code in bioql PyPI...

EUVD-2022-6862

Malicious code in bioql PyPI...

EUVD-2023-59957

Malicious code in bioql PyPI...

EUVD-2024-19587

Malicious code in bioql PyPI...

EUVD-2024-3357

Malicious code in bioql PyPI...

EUVD-2024-51811

Malicious code in bioql PyPI...

EUVD-2022-6407

Malicious code in bioql PyPI...

EUVD-2023-30252

Malicious code in bioql PyPI...

Malicious Package

Overview react-device-mockup-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview mockup-plugin-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-20370

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role that contains the high-privilege capability changeauthentication, could send multiple LDAP bind requests to a specific...

CVE-2025-11148

All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...

Malicious Package

Overview airbyte-webapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...