alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +22 more potentially affected by unknown CVE via unic-ucd-name (>=0.6.0, <=0.9.0)

unic-ucd-name CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =0.1.0, =1.11.3, =0.1.0, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0076...

@avorati/strapi-plugin-preview (1.0.1), @futurebrand/helpers-strapi (>=2.0.0, <=2.5.4) +5 more potentially affected by CVE-2025-3930 via @strapi/strapi (>=5.0.0-rc.10, <=5.16.1)

@strapi/strapi NPM version =5.0.0-rc.10, =2.0.0, =2.0.0, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-3930 Source advisory: OSV:GHSA-4R8W-3JWW-M2RP...

atomr-persistence-mongodb (>=0.1.0, <=0.10.1), authifier (>=1.0.10, <=1.0.16) +36 more potentially affected by CVE-2025-11695 via mongodb (3.1.1)

mongodb CARGO version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongodb and may be impacted: - atomr-persistence-mongodb =0.1.0, =1.0.10, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =2.0.2 - mongodb-ensure-index 0.1.1 - mongodm 0.10.0 and more...

Fedora: Security Advisory (FEDORA-2025-a8f5576fe3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7808-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

forc (>=0.1.3, <=0.33.0), forc-client (>=0.20.1, <=0.33.0) +30 more potentially affected by unknown CVE via fuel-vm (>=0.1.1, <=0.22.7)

fuel-vm CARGO version =0.1.1, =0.1.3, =0.20.1, =0.10.0, =0.10.0, =0.1.8, =0.10.0, =0.6.1, =0.30.1, =0.6.1, =0.9.1, =0.9.1, =0.9.1, =0.11.2, =0.1.2, =0.9.1, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PGJ-5CV2-6XXW...

Fedora 42 : insight (2025-5abaff3fcb)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5abaff3fcb advisory. Fix CVS 2025-11082 and 2025-11083. + conditional for explicit BR tcl/tk 8 + dummy rpm check section. Tenable has extracted the preceding description...

@activepieces/piece-imap (>=0.2.17, <=0.3.2), @akiflow/mailauth (>=0.0.1, <=0.0.2) +71 more potentially affected by unknown CVE via nodemailer (>=7.0.2, <=7.0.6)

nodemailer NPM version =7.0.2, =0.2.17, =0.0.1, =1.0.0, =3.3.1, =0.0.1, =0.6.0, =5.1.663-alpha, =1.2.4, =29.1.0, =1.0.1, =2.12.3-snapshot-1749038455154, =4.0.0, =1.0.25, =8.0.1, =7.0.7, =8.1.17 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-13378253...

EUVD-2021-1173

Malware in sbrugna...

EUVD-2022-1256

Malicious code in bioql PyPI...

EUVD-2024-0610

Malicious code in bioql PyPI...

EUVD-2022-6477

Malicious code in bioql PyPI...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299835...

algeb (>=1.0.0, <=5.4.0), anys (>=0.0.1, <=9.0.0) +37 more potentially affected by CVE-2025-57351 via ts-fns (>=0.0.11, <=13.1.3)

ts-fns NPM version =0.0.11, =1.0.0, =0.0.1, =0.0.1, =1.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.2, =9.0.0 and more Source cves: CVE-2025-57351 Source advisory: SNYK:JS-TSFNS-13109930...

4d-oled (>=1.0.0, <=1.0.2), @abb92/holidates (>=1.0.0, <=1.0.1) +969 more potentially affected by CVE-2025-57328 via toggle-array (>=0.1.0, <=1.0.1)

toggle-array NPM version =0.1.0, =1.0.0, =1.0.0, =5.0.0, =4.0.2, =0.0.0-snapshot-ZERO-3343-20250425065225, =0.8.1-beta.2, =0.1.0, =0.1.1-a, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.11.0 and more Source cves: CVE-2025-57328 Source advisory: SNYK:JS-TOGGLEARRAY-13110016...

0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)

@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: SNYK:JS-MESHCONNECTWEBLINKSDK-13004671...

@circleci/agents (>=1.0.6, <=2.10.0), @digipair/skill-codex (>=0.99.1, <=0.144.1) +3 more potentially affected by CVE-2025-59532 via @openai/codex (>=0.8.0, <=0.29.0)

@openai/codex NPM version =0.8.0, =1.0.6, =0.99.1, =0.0.1, =0.1.0, =0.99.1, =0.144.1 Source cves: CVE-2025-59532 Source advisory: OSV:GHSA-W5FX-FH39-J5RW...

Ubuntu: Security Advisory (USN-7746-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code activates a hook whenever a Web3 wallet is present...

better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +97 more potentially affected by unknown CVE via libyml (>=0.0.4, <=0.0.5)

libyml CARGO version =0.0.4, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.2, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFXP-F68G-8X78...