EUVD-2023-23509

Malicious code in bioql PyPI...

EUVD-2021-8697

Malicious code in bioql PyPI...

EUVD-2022-28575

Malicious code in bioql PyPI...

EUVD-2024-3528

Malicious code in bioql PyPI...

EUVD-2022-0546

Malicious code in bioql PyPI...

EUVD-2025-0107

Malicious code in bioql PyPI...

EUVD-2022-25137

Malicious code in bioql PyPI...

Malware in airbyte-webapp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview airbyte-webapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in airbyte-webapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb9621dfdc8c213cde4d731ad33b75a36cc9298649d12d5ed1669fb3d401f1c Any computer that has this package installed or running should be considered...

MAL-2025-47843 Malicious code in airbyte-webapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb9621dfdc8c213cde4d731ad33b75a36cc9298649d12d5ed1669fb3d401f1c Any computer that has this package installed or running should be considered...

MAL-2025-47713 Malicious code in playbook-builder-webapp (npm)

--- -= Per source details. Do not edit below this line.=-...

autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2025-57833 via django (3.2.2)

django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

Malicious code in @ninjaone/webapp (npm)

The package @ninjaone/webapp was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-9116 Malicious code in @ninjaone/webapp (npm)

The package @ninjaone/webapp was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

PT-2025-48545

Name of the Vulnerable Software and Affected Versions XWiki versions 16.7.0 through 16.10.11 XWiki versions 17.4.0 through 17.4.4 XWiki version 17.7.0 Description XWiki, an open-source wiki software platform, has an issue where the XWiki Jetty package XJetty exposes a context allowing static acce...

Malicious code in demo-vault-backup-webapp (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6281 Malicious code in demo-vault-backup-webapp (npm)

The package communicates with a domain associated with malicious activity...

org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.1-beta) +2 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: OSV:GHSA-44C3-38H8-9FH9...

Security update for tomcat

This update for tomcat fixes the following issues: CVE-2025-46701: Fixed refactor CGI servlet to access resources via WebResources bsc1243815. CVE-2025-48988: Fixed limits the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656...