Malicious code in @ra-ide/logix-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190593 Malicious code in @ra-ide/logix-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198325

Malicious code in @ra-ide/source-code-frontend npm...

MAL-2025-190594 Malicious code in @ra-ide/source-code-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b026a3f908a4875695a81716cd5056c2991f150b9661187eeebd42cdc8577b The package @ra-ide/source-code-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190597 Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190595 Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190590 Malicious code in @ra-ide/code-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39784fd9275723725034c0f9fcb2df35d06963659572a3aeaccd51e3a5e07e61 The package @ra-ide/code-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198327

Malicious code in @ra-ide/st-frontend npm...

Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190592 Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198329

Malicious code in @ra-ide/ld-frontend npm...

CVE-2025-63848

Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...

CVE-2025-63848

SWISH prolog (version 2.2.0 and earlier ) is vulnerable to a stored cross-site scripting (XSS) flaw. An attacker can execute arbitrary code by providing a crafted web IDE notebook , which may lead to account takeover (ATO) . To mitigate this risk, users should upgrade to the latest version; a spe...

PT-2025-47605

Name of the Vulnerable Software and Affected Versions SWISH prolog versions through 2.2.0 Description A stored cross site scripting issue exists in SWISH prolog through version 2.2.0. This allows attackers to execute arbitrary code through a specially crafted web IDE notebook. The issue involves...

CVE-2025-63848: Improper Neutralization of Input During Web Page Generation

Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...

Security Bulletin: Due to use of the sha.js library, IBM watsonx Code Assistant IDE Extensions is affected by Improper Input Validation vulnerability

Summary Sha.js is used internally by IBM watsonx Code Assistant IDE Extensions CVE-2025-9288 Vulnerability Details CVEID:CVE-2025-9288 DESCRIPTION: Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11. CWE:CWE-20: Improper Inpu...

CVE-2025-8386

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

CVE-2025-8386

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...