MAL-2025-548 Malicious code in meli-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac505cb26eb829b7873ae3ef5920a2fe35d4627fc36c958e35a24d261e0bc7df The OpenSSF Package Analysis project identified 'meli-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a21aaa2acd24b74ce7634bafecd7bc3e4f9508ef8062d748fb284d79f0661619 The OpenSSF Package Analysis project identified 'lyft-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-526 Malicious code in lyft-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a21aaa2acd24b74ce7634bafecd7bc3e4f9508ef8062d748fb284d79f0661619 The OpenSSF Package Analysis project identified 'lyft-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-512 Malicious code in linkedin-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in iberia-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a54db79a25a05a038514ad99f427a93d74f2a9b79fcf140647e71b8000e88be The OpenSSF Package Analysis project identified 'iberia-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-488 Malicious code in iberia-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a54db79a25a05a038514ad99f427a93d74f2a9b79fcf140647e71b8000e88be The OpenSSF Package Analysis project identified 'iberia-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fc05cc5d0552c5e553e3f25b83917c1f80d321380c8c4243a72a984acda3e6f The OpenSSF Package Analysis project identified 'godaddy-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-461 Malicious code in godaddy-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fc05cc5d0552c5e553e3f25b83917c1f80d321380c8c4243a72a984acda3e6f The OpenSSF Package Analysis project identified 'godaddy-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-417 Malicious code in coinbase-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfca6e22bde9e7158f92c9dac3a4b739e2c3b38cb8e2a96cdd1ad74e5e48e0ac The OpenSSF Package Analysis project identified 'coinbase-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in coinbase-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfca6e22bde9e7158f92c9dac3a4b739e2c3b38cb8e2a96cdd1ad74e5e48e0ac The OpenSSF Package Analysis project identified 'coinbase-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in bookingcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68d25686015085f4d524b134542a14b1748266da0711ecc36ae2a59afe2abebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-399 Malicious code in bookingcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68d25686015085f4d524b134542a14b1748266da0711ecc36ae2a59afe2abebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-373 Malicious code in amazon-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in apple-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7472f2e3c4be462937b9b2f925090cd83a2ba82bfa3e410284bc71df5a51c4a The OpenSSF Package Analysis project identified 'apple-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-389 Malicious code in apple-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7472f2e3c4be462937b9b2f925090cd83a2ba82bfa3e410284bc71df5a51c4a The OpenSSF Package Analysis project identified 'apple-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-23997

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tamara Solution Tamara Checkout tamara-checkout allows Stored XSS.This issue affects Tamara Checkout: from n/a through 1.9.9.1...

CVE-2025-23997

CVE-2025-23997 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Tamara Checkout. Connected sources specify that the issue arises from improper neutralization of input during web page generation, affecting Tamara Checkout versions up to 1.9.8 (WordPress plugin context)....

CVE-2025-23997 WordPress Tamara Checkout plugin < 1.9.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tamara Solution Tamara Checkout tamara-checkout allows Stored XSS.This issue affects Tamara Checkout: from n/a through 1.9.9.1...