MAL-2025-1183 Malicious code in trading-frontend-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b931a5adbb0718e691268662ac514d3c73ac541291718baf8b035a33a7ddca93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trading-frontend-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b931a5adbb0718e691268662ac514d3c73ac541291718baf8b035a33a7ddca93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Demo User DZS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Dem...

MAL-2025-718 Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

MAL-2025-745 Malicious code in nodejs-paypal-checkout-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909c8505097e7b62c38bde6c75bb0ba8516f566136ec093b913944bcbdd1130e Any computer that has this package installed or running should be considered...

MAL-2025-325 Malicious code in wallet-history-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e10d053f3cba02a172ebaf54943b9da709bd08e031437c58279fd60849064f The OpenSSF Package Analysis project identified 'wallet-history-demo-backend' @ 1.1.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in wallet-history-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e10d053f3cba02a172ebaf54943b9da709bd08e031437c58279fd60849064f The OpenSSF Package Analysis project identified 'wallet-history-demo-backend' @ 1.1.0 npm as malicious. It is considered malicious because: - Th...

MAL-2025-159 Malicious code in api-demo-sample-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf23a2c3e41d22ea84314170a6f9e3359768c7cedbf3bb3235f4f1146b218fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-demo-sample-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf23a2c3e41d22ea84314170a6f9e3359768c7cedbf3bb3235f4f1146b218fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Demo User DZS versions = 1.1.0...

CVE-2024-12781 Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import

The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'lab1cldemoinstallpackagecontent' function in all versions up to, and including, 4.0.2. This makes it possible for authenticated...

WordPress plugin Aurum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-1950 · Aurum · Aurum

Name of the Vulnerable Software and Affected Versions: Aurum - WordPress & WooCommerce Shopping Theme versions prior to 4.0.3 Description: The issue concerns a missing capability check in the lab 1cl demo install package content function, allowing authenticated attackers with Subscriber-level...

WordPress Aurum theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import vulnerability

Missing Authorization to Authenticated Subscriber+ Demo Content Import vulnerability discovered by Lucio Sá in WordPress Theme Aurum versions = 4.0.2...

MAL-2025-57 Malicious code in api-demo-sample-lib3 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

Malicious code in api-demo-sample-lib4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-58 Malicious code in api-demo-sample-lib4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-12076 Malicious code in api-demo-sample-lib1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb4cdcfd09bde3632e5027efd5e0378c93e89ab16f9e0f0e931586d1679412d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-demo-sample-lib1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb4cdcfd09bde3632e5027efd5e0378c93e89ab16f9e0f0e931586d1679412d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...