PT-2025-48805

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woof add query" and "woof remove query" functions due to missing validation on a user controlled key. This makes i...

WordPress plugin HUSKY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199409

Malicious code in @voiceflow/husky-config npm...

MAL-2025-191353 Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-176904

Malicious code in pulsar-interferometry-singularitarianism-husky npm...

EUVD-2025-178488

Malicious code in husky-glaciology-weywot-rest npm...

EUVD-2025-178490

Malicious code in husky-despina-readable-oscillation npm...

EUVD-2025-178726

Malicious code in geoarchaeology-sagitta-chalk-husky npm...

Malicious code in private-husky-mensa-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f73ec9c49d224ee7cbf6837dec4abf5ce1ca29d78e986a3c716b2676641eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177258

Malicious code in perseus-geoarchaeology-husky-changelog npm...

EUVD-2025-177047

Malicious code in private-husky-mensa-package npm...

EUVD-2025-180155

Malicious code in backend-exec-husky-public npm...

EUVD-2025-176554

Malicious code in sagitta-schema-release-it-husky npm...

EUVD-2025-178491

Malicious code in husky-bulma-nebula-concurrently npm...

EUVD-2025-178704

Malicious code in global-centauri-jabbah-husky npm...

EUVD-2025-177874

Malicious code in metalsmith-json-husky-dotenv-safe npm...

EUVD-2025-178629

Malicious code in gulp-oberon-husky-start npm...

Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179006

Malicious code in event-husky-tachyon-auth0 npm...