6210 matches found
PT-2025-47272
Name of the Vulnerable Software and Affected Versions Coil Web Monetization plugin for WordPress versions prior to 2.0.3 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by inadequate nonce validation when handling the coil-get-css-selector...
Mozilla Thunderbird < 52.5.2
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-30 advisory. - It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g...
EUVD-2025-179463
Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova npm...
EUVD-2025-178818
Malicious code in fusion-gravity-css-loader-perseus npm...
EUVD-2025-178326
Malicious code in izar-mini-css-extract-plugin-hercules-nightmare npm...
EUVD-2025-177418
Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus npm...
Malicious code in fusion-gravity-css-loader-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52baf9ca8ebdb49763df8f528108db23d21f441b6cd5d8a94e2be0ad3edd8db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177910
Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...
EUVD-2025-178004
Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...
EUVD-2025-176413
Malicious code in server-filament-framework-css-minimizer-webpack-plugin npm...
EUVD-2025-178549
Malicious code in hercules-css-loader-restart-eslint-plugin npm...
EUVD-2025-178946
Malicious code in farout-colors-hologram-mini-css-extract-plugin npm...
EUVD-2025-180399
Malicious code in apex-electron-protractor-mini-css-extract-plugin npm...
EUVD-2025-177530
Malicious code in nova-chakra-ui-css-loader-eris npm...
EUVD-2025-178745
Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin npm...
EUVD-2025-180295
Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin npm...
EUVD-2025-177259
Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies npm...
EUVD-2025-178405
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...
Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...