WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WoodMart versions 8.3.8...

Malicious code in box-sign-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76143eab11057809af00414cb665446366f039e3cbf1fa82aae06a1093cbbf49 [email protected] is a dependency-confusion vehicle positioned against the internal Box namespace @box/sign-client. Its package.json declares a...

MAL-2026-15920 Malicious code in box-sign-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76143eab11057809af00414cb665446366f039e3cbf1fa82aae06a1093cbbf49 [email protected] is a dependency-confusion vehicle positioned against the internal Box namespace @box/sign-client. Its package.json declares a...

Malicious Package

Overview cygnus-cache-magellan-run-script is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview dynamo-run-script-jasmine-kuiperbelt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Malicious code in text-transform-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3efed1eeb185e17a51a67059e57156e5c540899e5a30076df710e0242a5560c The package's postinstall script downloads a ZIP archive from a hardcoded Dropbox URL https://www.dropbox.com/scl/fi/djz38wdi1wks9j1h57zuv/coeur.zip ...

MAL-2026-15915 Malicious code in text-transform-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3efed1eeb185e17a51a67059e57156e5c540899e5a30076df710e0242a5560c The package's postinstall script downloads a ZIP archive from a hardcoded Dropbox URL https://www.dropbox.com/scl/fi/djz38wdi1wks9j1h57zuv/coeur.zip ...

MAL-2026-15916 Malicious code in xcryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e6d862a8e433df7f0bd31ab9a6b76f616273783517c81f5e428ad2774ad4e The package declares a postinstall script scripts/install.js that on npm install downloads a ZIP archive from...

Malicious code in xcryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e6d862a8e433df7f0bd31ab9a6b76f616273783517c81f5e428ad2774ad4e The package declares a postinstall script scripts/install.js that on npm install downloads a ZIP archive from...

MAL-2026-15901 Malicious code in net-util-y8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The...

Malicious code in easypanel-ctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variab...

MAL-2026-15898 Malicious code in easypanel-ctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variab...

MAL-2026-15897 Malicious code in easypanel-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb013a465c19126feba2006a81f33d65cc64b269e3da8ffe4e8284c7defa3cc easypanel-core ships an inert module.exports = main and places all functionality in a preinstall lifecycle script. On npm install, preinstall.js...

Malicious code in easypanel-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb013a465c19126feba2006a81f33d65cc64b269e3da8ffe4e8284c7defa3cc easypanel-core ships an inert module.exports = main and places all functionality in a preinstall lifecycle script. On npm install, preinstall.js...

Malicious code in easypanel-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2744a6f0dfde1930ab560731e54cb8a1e1c8dc61a2072705498ddcaa6dd1a592 The package's preinstall lifecycle script runs automatically on npm install and collects installer identity os.hostname, os.userInfo.username,...

MAL-2026-15895 Malicious code in easypanel-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2744a6f0dfde1930ab560731e54cb8a1e1c8dc61a2072705498ddcaa6dd1a592 The package's preinstall lifecycle script runs automatically on npm install and collects installer identity os.hostname, os.userInfo.username,...

Malicious code in easypanel-docker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable...

MAL-2026-15899 Malicious code in easypanel-docker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable...

Exploit for CVE-2020-1938

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...

Malicious code in tiny-folder-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7707665659f287294c31f37c4eff9ceba537e9b54859837615929c296a9540 [email protected] declares a postinstall script src/build.js that runs on npm install. The script performs a DNS TXT lookup for...