MAL-2025-15107 Malicious code in auto-create-tickets (npm)

The package auto-create-tickets was found to contain malicious code...

MAL-2025-7980 Malicious code in @ginger-dev/create (npm)

The package @ginger-dev/create was found to contain malicious code...

MAL-2025-11029 Malicious code in @zalastax/nolb-create-x (npm)

The package @zalastax/nolb-create-x was found to contain malicious code...

Malicious code in @ginger-dev/create (npm)

The package @ginger-dev/create was found to contain malicious code...

MAL-2025-7733 Malicious code in @create-project-container/legacy (npm)

The package @create-project-container/legacy was found to contain malicious code...

MAL-2025-17666 Malicious code in create-temp-dir (npm)

The package create-temp-dir was found to contain malicious code...

MAL-2025-17663 Malicious code in create-react-kit (npm)

The package create-react-kit was found to contain malicious code...

Malicious code in @zalastax/nolb-create-x (npm)

The package @zalastax/nolb-create-x was found to contain malicious code...

Malicious code in auto-create-tickets (npm)

The package auto-create-tickets was found to contain malicious code...

MAL-2025-15169 Malicious code in avalon-cli-create (npm)

The package avalon-cli-create was found to contain malicious code...

MAL-2025-17667 Malicious code in create-y (npm)

The package create-y was found to contain malicious code...

MAL-2025-17664 Malicious code in create-release-hash (npm)

The package create-release-hash was found to contain malicious code...

MAL-2025-17662 Malicious code in create-planning-file-from-airtable (npm)

The package create-planning-file-from-airtable was found to contain malicious code...

Malicious code in avalon-cli-create (npm)

The package avalon-cli-create was found to contain malicious code...

MAL-2025-11028 Malicious code in @zalastax/nolb-create-r (npm)

The package @zalastax/nolb-create-r was found to contain malicious code...

MAL-2025-11027 Malicious code in @zalastax/nolb-create-7 (npm)

The package @zalastax/nolb-create-7 was found to contain malicious code...

MAL-2025-17665 Malicious code in create-shop-mini (npm)

The package create-shop-mini was found to contain malicious code...

CVE-2025-53631

flaskBlog is a blog app built with Flask. In versions 2.8.1 and prior, improper sanitization of postContent when submitting POST requests to /createpost leads to arbitrary JavaScript execution XSS on all pages the post is reflected on including /, /post/ID, /admin/posts, and /user/ID of the user...

CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload

A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...

CVE-2025-53631

FlaskBlog vulnerability CVE-2025-53631 affects FlaskBlog versions prior to 2.8.1. Root cause: improper sanitization of postContent submitted to /createpost, enabling arbitrary JavaScript execution (XSS) on all pages where the post is reflected (/, /post/[ID], /admin/posts, /user/[ID]). Impact is ...