CVE-2025-36088: Improper Neutralization of Input During Web Page Generation

IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu...

Malicious code in ixordocs-portal-gui (npm)

The package ixordocs-portal-gui was found to contain malicious code...

Malicious code in dev-gui-client (npm)

The package dev-gui-client was found to contain malicious code...

Malicious code in acerta-calendar-gui (npm)

The package acerta-calendar-gui was found to contain malicious code...

MAL-2025-10060 Malicious code in @zalastax/nolb-_gui (npm)

The package @zalastax/nolb-gui was found to contain malicious code...

MAL-2025-19216 Malicious code in edcm-gui (npm)

The package edcm-gui was found to contain malicious code...

Malicious code in edcm-gui (npm)

The package edcm-gui was found to contain malicious code...

Malicious code in dct-admin-gui (npm)

The package dct-admin-gui was found to contain malicious code...

MAL-2025-13993 Malicious code in acerta-calendar-gui (npm)

The package acerta-calendar-gui was found to contain malicious code...

MAL-2025-18108 Malicious code in dct-admin-gui (npm)

The package dct-admin-gui was found to contain malicious code...

MAL-2025-23519 Malicious code in ixordocs-portal-gui (npm)

The package ixordocs-portal-gui was found to contain malicious code...

Malicious code in @zalastax/nolb-_gui (npm)

The package @zalastax/nolb-gui was found to contain malicious code...

MAL-2025-18343 Malicious code in dev-gui-client (npm)

The package dev-gui-client was found to contain malicious code...

Malicious Package

Overview zoncafecomment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview boardpostingduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools fo...

Malicious Package

Overview CAFEGeneral is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview CAFEverillban is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview cafebuyduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview tblogduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview idz-64bit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...