@kash_tt/common (>=1.0.1, <=1.1.236), @topperdev17/common (>=1.0.0, <=2.0.1) +6 more potentially affected by unknown CVE via typecript (0.0.1-security)

typecript NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on typecript and may be impacted: - @kashtt/common =1.0.1, =1.0.0, =1.0.3, =1.0.53, =0.0.1, =1.0.5, =1.0.14 - tant-intl-new 1.0.14 Source cves: unknown CVE Source advisor...

MAL-2025-21314 Malicious code in generator-watson-voice-of-the-customer (npm)

The package generator-watson-voice-of-the-customer was found to contain malicious code...

Malicious code in zaki-bakwan62-sukiwir (npm)

The package zaki-bakwan62-sukiwir was found to contain malicious code...

MAL-2025-12154 Malicious code in @zalastax/nolb-jsonz (npm)

The package @zalastax/nolb-jsonz was found to contain malicious code...

MAL-2025-28094 Malicious code in ocean-kiwi-tmf596-project (npm)

The package ocean-kiwi-tmf596-project was found to contain malicious code...

MAL-2025-33431 Malicious code in slow-moon-air-scale-interpret (npm)

The package slow-moon-air-scale-interpret was found to contain malicious code...

MAL-2025-39038 Malicious code in webpay-webserviceAPI (npm)

The package webpay-webserviceAPI was found to contain malicious code...

MAL-2025-29848 Malicious code in project-4tdxc-grape (npm)

The package project-4tdxc-grape was found to contain malicious code...

MAL-2025-11870 Malicious code in @zalastax/nolb-ha4 (npm)

The package @zalastax/nolb-ha4 was found to contain malicious code...

MAL-2025-27011 Malicious code in mytaning (npm)

The package mytaning was found to contain malicious code...

MAL-2025-19242 Malicious code in efidiario (npm)

The package efidiario was found to contain malicious code...

MAL-2025-15132 Malicious code in ava-ilable-down-load-mp3-today-31194-screamin-for-my-supper-gg9s6-ioyirj (npm)

The package ava-ilable-down-load-mp3-today-31194-screamin-for-my-supper-gg9s6-ioyirj was found to contain malicious code...

MAL-2025-41125 Malicious code in zucchini-sierra-papaya-pcivf (npm)

The package zucchini-sierra-papaya-pcivf was found to contain malicious code...

MAL-2025-14545 Malicious code in anivid (npm)

The package anivid was found to contain malicious code...

MAL-2025-18692 Malicious code in down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw (npm)

The package down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw was found to contain malicious code...

MAL-2025-40272 Malicious code in yankee-quebec-mike-qprnm (npm)

The package yankee-quebec-mike-qprnm was found to contain malicious code...

MAL-2025-7924 Malicious code in @erboladaiteas/tempore-repudiandae-ullam-nulla (npm)

The package @erboladaiteas/tempore-repudiandae-ullam-nulla was found to contain malicious code...

MAL-2025-38797 Malicious code in wasat-cladistics-astrometry-carpo (npm)

The package wasat-cladistics-astrometry-carpo was found to contain malicious code...

MAL-2025-18348 Malicious code in devathlon (npm)

The package devathlon was found to contain malicious code...

CVE-2025-8047

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert...