Lucene search
K

225917 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•9 views

Malicious code in react-sitecore-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcb38af52d8a28ad89a31c0415f1673eb2ca18ec76121703ded6334a6b7e6d2 The package react-sitecore-library was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•8 views

Malicious code in @spx-smartsorting/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0f383e5f85168809feb97c29b3dfbd12d807bcf0de67ae579f0dcc606889cc The package @spx-smartsorting/vue was found to contain malicious code. Source: ghsa-malware...

5.8AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•5 views

Malicious code in sd-ccp-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767cf50a9b0a16fd39e9fbbf533657ccbafe4120cb01d2c6da4c9fedc2cb342e The package sd-ccp-module-client was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in sd-agent-toolbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2576939df07755f988257b0f663de717ddc355bc9604a690d0abf25b74d19 The package sd-agent-toolbar-module-client was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•10 views

Malicious code in sd-active-conversation-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278082132569830ff8cb8dd522f0e5284296ea09a1eebfbebffd95656cfe9c63 The package sd-active-conversation-module-client was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•7 views

Malicious code in omnicore-ds2-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e1c62468ce0da7fc1beb34de16d8faa8633411ce4217f2d4e6b6bf3fc92a53 The package omnicore-ds2-sdk2 was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in @wb-team/uikit-myteam-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf39991881d2a08d3aa421675b4c1a7b562a4b50c70e7d9c0f7bb54a0d8f0e4 The package @wb-team/uikit-myteam-web was found to contain malicious code. Source: ghsa-malware...

5.8AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•5 views

Malicious code in lead-ion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b94952b37be8de5cd4b876f8a727522e99b0ecec9833bdbc5d1317ecea3ba3 The package lead-ion was found to contain malicious code. Source: ghsa-malware 869120ab1d13a2e9efe9b9341ed9c11c2713a91661a59d52a32771e69f6bb4a4 Any...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•7 views

Malicious code in insightvm-ui-nav-menus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e901eb03445094160df9df30313f817015ba26cdd09e82d4f527261acda35 The package insightvm-ui-nav-menus was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•8 views

Malicious code in chakra-ui-2--styled-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8febe083a3c8d9449ea02eb0ab1ab112c8ea582743da6ce1f0ee9f0cb9d4d5 The package chakra-ui-2--styled-system was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in idel2-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c81387cec5e85e071f4ffa2a4791747c731e8f247b60c236fa2a4ff7c0e1858 The package idel2-content was found to contain malicious code. Source: ghsa-malware 878a0a64404d0cc18be1c02fa0a38a98513049bccb02e919e4d8ee3c632f004a...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•4 views

Malicious code in sd-navbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5eb5c5baa5e482655961b2dd4ced29ff771428c5870106e0a30cc916913908 The package sd-navbar-module-client was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•7 views

Malicious code in sd-conversation-history-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c335176b96214a0cf97acfa97156cd4216c1aa6e764167f49cef0eaa89cc72 The package sd-conversation-history-module-client was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in dibels8-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0822fb035f2f2b218e9bbb86896773e4f423334de708e5fe40ab853a4d22abfe The package dibels8-content was found to contain malicious code. Source: ghsa-malware 68b763b414011b0fcdc784120c3cc7890b7a8bff93ba2d0ea2f43df38880f97...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in comstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdbf1b29e6524cad706ce8d312446d5869b2fb6614892bf9a350ade6b66d3df The package comstrap was found to contain malicious code. Source: ghsa-malware 9c9cb6396bf07d4b55b2e600f0e19966c1141733ef266c323e5382e75d0e1b76 Any...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•5 views

Malicious code in lusha-micro-app-messages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2763ac2e60a783720a4825cd416a2c3e991ab820c9a11c72d809c5162eb822 The package lusha-micro-app-messages was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in spire.officejs-externs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfb46e06f3d17c765d605a42471cb4f6b75133ef12587b0dd769276a77fddcc The package spire.officejs-externs was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in flag-v211 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f225748a91e64bc77a6b8344c2eefb007f216b3c596ce5b19e92e4dfbd1f4ff The package flag-v211 was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in origin_response_handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f01e7a54ba6e13e0d26328d24c5fc2c743d67188653b4d61891fedb6dc68f The package originresponsehandler was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•5 views

Malicious code in js-observability (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70afb236a90dfd2de166a3fe7626fc3c10526de7dffda8468c0a8eccaf964b The package js-observability was found to contain malicious code. Source: ghsa-malware e73e93c1fefbabe1cd40c1fafdb7cd01b97aae241106ecee4aad599c02756d...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in base-ui-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dfd5d7f28a3a6c1911e9b745f0114967cd677bea80bbfc7c490e6bf1f09ddf The package base-ui-vue3 was found to contain malicious code. Source: ghsa-malware 88f9d0f6ba47ed2a8d641427839b31d3b2debfea9d13f32125734f392a0838d9 A...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•5 views

Malicious code in auc-2-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•6 views

Malicious code in lusha-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47311f434688a3bfc2d92cc352f17ea81881ca4fd76850cf58e5a8de684b8083 The package lusha-widgets was found to contain malicious code. Source: ghsa-malware f47912da61d1b54a9476138aabefeb11945badc0bdc05666b5b23989d16f8f2a...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•8 views

Malicious code in tailwind-merge-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7eb6509e7116f0d29cc221829baf733446faecce580b8d9334b6a43586ad58 The package tailwind-merge-v3 was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/15 6:21 a.m.•5 views

Malicious code in experian-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 9:16 p.m.•8 views

Malicious code in haqawi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c55dd7769c6bf39fd838af80c68669f79339abce1333cd421d9477144d7fde4 Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has...

7.2AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 9:14 p.m.•9 views

Malicious code in legendevil1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3188a850ecb974606264f28634afaca67ec2f49c1c759cf590aa39ba19e50452 Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has...

7.2AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 7:29 p.m.•6 views

Malicious code in hairest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a47476109391081ac326c65a5624df44ba19f7e2597aaeffa47552a053e9773 Package collects and exfiltrates Discord credentials from multiple sources --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 4:51 p.m.•5 views

Malicious code in webmd-page-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ac133760e765dbcb76befb93e31a79e19da15b27c94d4b5da3b8e43c00f2b1 The package webmd-page-common was found to contain malicious code. Source: ghsa-malware...

5.6AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 2:22 p.m.•6 views

Malicious code in clipcord (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fca6ce37489de021bfea975a55751ad244552b7868a4e534f955d30a0efb1770 Package collects and exfiltrates Discord credentials from multiple sources --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 12:5 p.m.•6 views

Malicious code in solana-program (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7f4afe6d0bf016660b9bcd20e900d4d0504af8c3ac7f7dc69f20229ebcddb21 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.5AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 11:12 a.m.•6 views

Malicious code in soupclaw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d81f6899b3e1e16c0fd74656a7fb8cedfd711e9e68078d85ed95cdb10979e3d1 Package collects and exfiltrates Discord credentials from multiple sources --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 8:42 a.m.•6 views

Malicious code in silvermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b977fbc50506142e7db68fc536bdfd96ccfa135ff0c03f3957d24b716cc4441 The package silvermine was found to contain malicious code. Source: ghsa-malware 194377d773e651f6f01c9662fac716fb338b55f83baafc1c503b692fe1195e5a Any...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/14 6:37 a.m.•7 views

Malicious code in transitive-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d7b45680b49152176403af486a0af997c20d1eaa8179a69b8e5c3ee65a41e35a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 4:34 p.m.•7 views

Malicious code in ts-tweetnacl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc02aaeff144bdf5547d650cfae75b4f8861d765cafa72a8bd01609b8be299b The package ts-tweetnacl was found to contain malicious code. Source: ghsa-malware b8c7022964715c8d5771f3663406b7b80018244bca155ecad7064ba3d2b2ce5e A...

5.5AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 3:31 p.m.•3 views

Malicious code in admin1001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e1e1483632e97bcfb216cd6ac37d5870178c8de00848a7a6de4df461951b4 The package admin1001 was found to contain malicious code. Source: ghsa-malware 2e19c4af31e55eea3be82d478468774b271484b0c7a8ba0078ad55fd8995ba91 Any...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 2:21 p.m.•10 views

Malicious code in dify-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a40038bb1837e98127f2e267d1932d1eeb641c93e855c50af9aa25002e28c76b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.5AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 8:19 a.m.•8 views

Malicious code in @flipster/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7959db4a5848d904daa027ec759ca4588e6c033f1df17a82686a3d28d2dd2e9f The package @flipster/utils was found to contain malicious code. Source: ghsa-malware 0490c6f411da9b1fa5efbfd1cad8e7b41ec915751813279fb2a89a0f5e96752...

5.8AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 5:26 a.m.•8 views

Malicious code in cnamts-captcha-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f061900c13c9363e97f1336b62c6c9efff79aefdae954a4d6183900bf71f69c The package cnamts-captcha-component was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 4:13 a.m.•9 views

Malicious code in helium-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f63c743fd06fb24cb2d488e001ce0efab3f0d82014801ea2eebad96041692 The package helium-module was found to contain malicious code. Source: ghsa-malware d34558c0d1e56c0103ad087e485e142f3918050a1b0bdc15fc7e7b46c1a2ae1f...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 4:13 a.m.•4 views

Malicious code in francium-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbfe7cfa0e201004579dc73a60307dbd93e6507801d3dd767b689cb748535c1 The package francium-utils was found to contain malicious code. Source: ghsa-malware 36e968a97c914ae6c1bf4fb980564d69546cc92105d1be341f56c933ec2caa12...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 4:13 a.m.•3 views

Malicious code in francium-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f204d22648cb65e36ba9d225f45edaac3240ad8b638e40aa87397ebd20bc9bde The package francium-ui was found to contain malicious code. Source: ghsa-malware 9d6cf557fe491bb7638bf2b12ca8587adf51f6f3f105002a08544b42b567ee7d An...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 4:13 a.m.•5 views

Malicious code in francium-web-visitors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72629df67c0b81a1d120987aca534bd8096a0cbb2a9898a327a2dc2d1b8a0a49 The package francium-web-visitors was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 3:46 a.m.•10 views

Malicious code in extended-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daed3089b5ef77daaeecaac9fe17f36363fd47d3dbe2814f5902c7ec3e61a74 The package extended-path was found to contain malicious code. Source: ghsa-malware 69c860714616f6ecc1c5b9d066780ece372fd1346ffce61438ecc12c9a98b30b...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 3:23 a.m.•4 views

Malicious code in chai-as-enhanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb34c187e4750d1e5a6dc3c297a953d8089f054d74e4cac7667532d81b72ea8 The package chai-as-enhanced was found to contain malicious code. Source: ghsa-malware cb4ee9056898577e40bbef5e13e321597457852aa84f71886d4aef75898669...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/13 2:53 a.m.•4 views

Malicious code in paytmsiddlewaree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1efaf28ec793c8856900b61d75973e6fb48c4c8d7081740ca4cb3fe5baa755f The package paytmsiddlewaree was found to contain malicious code. Source: ghsa-malware 0834762f3450b3984c00a9fa79f7b78cf3676dc0b91f86fd53b26649e9b991...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/12 11:5 p.m.•7 views

Malicious code in formater (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 71f6a751b5ff98dceeee5863086a2d9988640b93d96ccef9d50fb0d0d1dd116c During importing the package automatically downloads a script that uses a Telegram bot to perform remote control over the computer --- Category: MALICIOUS - Th...

7.1AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/12 8:55 p.m.•7 views

Malicious code in graponater (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9bbd986bf5883f6b5b40a7061c514b13f71a27c021471595671d060b260affc3 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/12 5:56 a.m.•9 views

Malicious code in tailwindcss-animate-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150bc7ffcbd255578f8dc6e8ce8781a01e97dcdc6a57436976f6b08beb371807 The package tailwindcss-animate-tool was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/12 3:21 a.m.•7 views

Malicious code in express-sessions-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50976a5a79aa6e9a71eee66f3a74059d86a7620d670cf19ad43c9eb3619b0c2e The package express-sessions-id was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References1
Total number of security vulnerabilities225917