EUVD-2021-7651

Malicious code in bioql PyPI...

EUVD-2022-7006

Malicious code in bioql PyPI...

apache-commons-beanutils security update

An update is available for apache-commons-beanutils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Apache Commons BeanUtils library provides utility metho...

Binary Diff Summarization Using Large Language Models

Security of software supply chains is necessary to ensure that software updates do not contain maliciously injected code or introduce vulnerabilities that may compromise the integrity of critical infrastructure. Verifying the integrity of software updates involves binary differential analysis...

Malicious code in com.unity.xr.core-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47645 Malicious code in com.unity.xr.core-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47545 Malicious code in @sev-ui-verse/react-query-utils (npm)

The package @sev-ui-verse/react-query-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7159ac6527ad39a63e64403ef1ba63e8895558c89c17cf8355a6bfee386a761 Any computer that has this package installed or running should be...

@capriza/far (>=0.1.2 <=2.4.2), @cobalt-engine/cobower (=2.0.0) +388 more potentially affected by CVE-2025-59343 via tar-fs (>=0.1.8 <=1.16.3)

tar-fs NPM version =0.1.8, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.2 - @elm-node/npm-scripts =1.0.0 - @hlsrules-test/fc-libreoffice =1.0.0 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR...

MAL-2025-47474 Malicious code in chartable-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chartable-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bacpipe (>=1.2.0 <=1.3.2.dev0), decima2 (>=0.1.0 <=0.2.1) +11 more potentially affected by CVE-2025-9905 via keras (>=3.0.0 <=3.11.0)

keras PYPI version =3.0.0, =1.2.0, =0.1.0, =1.0.3, =0.0.28, =0.2.0, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-9905 Source advisory: OSV:PYSEC-2025-123...

decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-9906 via keras (>=3.0.0 <=3.10.0)

keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-9906 Source advisory: SNYK:PYTHON-KERAS-12927178...

Malicious Package

Overview validator-utils-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in validator-utils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe16686eac8cc9669d7b7cb7b2fb58b8ee27416f8281bf10cabe5710fff4618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-10671 youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values

A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of the file e-learning-master\exam-api\src\main\java\com\yf\exam\ability\shiro\jwt\JwtUtils.java of the component JWT Token Handler. The manipulation leads to insufficiently random...

Malicious code in regex-validator-utils (npm)

The package regex-validator-utils was found to contain malicious code...

MAL-2025-47440 Malicious code in regex-validator-utils (npm)

The package regex-validator-utils was found to contain malicious code...

Malicious code in @operato/utils (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf515160f453156c824533ed3660e80cbccfdf705ed5374cdcf987a18d6d44ee Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47263 Malicious code in @operato/utils (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf515160f453156c824533ed3660e80cbccfdf705ed5374cdcf987a18d6d44ee Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @openzeppelin-compact/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9559f883ef8ce66f28f6c6f0e338ec3c10d5ba28c0e2dd2c7133f5268f7e539f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...