EUVD-2022-24443

Malicious code in bioql PyPI...

EUVD-2025-22809

Malicious code in bioql PyPI...

EUVD-2025-18706

Malicious code in bioql PyPI...

EUVD-2022-44815

Malicious code in bioql PyPI...

EUVD-2025-18214

Malicious code in bioql PyPI...

EUVD-2024-39640

Malicious code in bioql PyPI...

EUVD-2025-13411

Malicious code in bioql PyPI...

EUVD-2023-25604

Malicious code in bioql PyPI...

EUVD-2023-30252

Malicious code in bioql PyPI...

EUVD-2024-3213

Malicious code in bioql PyPI...

EUVD-2023-47171

Malicious code in bioql PyPI...

EUVD-2024-53433

Malicious code in bioql PyPI...

EUVD-2025-29590

Malicious code in bioql PyPI...

EUVD-2024-30454

Malicious code in bioql PyPI...

EUVD-2025-15894

Malicious code in bioql PyPI...

Malicious Package

Overview mockup-plugin-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview react-device-mockup-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2025-20370

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role that contains the high-privilege capability changeauthentication, could send multiple LDAP bind requests to a specific...

CVE-2025-11148

All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...

Malicious Package

Overview airbyte-webapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...