Malicious code in sagitta-lint-staged-io-boson (npm)

The package sagitta-lint-staged-io-boson was found to contain malicious code...

Malicious code in testcafe-io-phenomic-halley (npm)

The package testcafe-io-phenomic-halley was found to contain malicious code...

Malicious code in axios-npm-cosmiconfig-io (npm)

The package axios-npm-cosmiconfig-io was found to contain malicious code...

Malicious code in centauri-io-xanthus-yildun (npm)

The package centauri-io-xanthus-yildun was found to contain malicious code...

MAL-2025-43004 Malicious code in @zalastax/nolb-_functions-io-labs-perfo (npm)

The package @zalastax/nolb-functions-io-labs-perfo was found to contain malicious code...

MAL-2025-46307 Malicious code in testcafe-io-phenomic-halley (npm)

The package testcafe-io-phenomic-halley was found to contain malicious code...

MAL-2025-45946 Malicious code in sagitta-lint-staged-io-boson (npm)

The package sagitta-lint-staged-io-boson was found to contain malicious code...

MAL-2025-45150 Malicious code in mdx-changelog-io-elara (npm)

The package mdx-changelog-io-elara was found to contain malicious code...

MAL-2025-43553 Malicious code in axios-npm-cosmiconfig-io (npm)

The package axios-npm-cosmiconfig-io was found to contain malicious code...

MAL-2025-43719 Malicious code in centauri-io-xanthus-yildun (npm)

The package centauri-io-xanthus-yildun was found to contain malicious code...

MAL-2025-44173 Malicious code in eslint-plugin-outercore-mysql-io (npm)

The package eslint-plugin-outercore-mysql-io was found to contain malicious code...

MAL-2025-44122 Malicious code in electron-postcss-io-dynamo (npm)

The package electron-postcss-io-dynamo was found to contain malicious code...

MAL-2025-45476 Malicious code in ora-io-local-public (npm)

The package ora-io-local-public was found to contain malicious code...

MAL-2025-43878 Malicious code in config-odin-io-procyon (npm)

The package config-odin-io-procyon was found to contain malicious code...

Malicious code in electron-postcss-io-dynamo (npm)

The package electron-postcss-io-dynamo was found to contain malicious code...

MAL-2025-43005 Malicious code in @zalastax/nolb-_functions-io-labs-perfor (npm)

The package @zalastax/nolb-functions-io-labs-perfor was found to contain malicious code...

MAL-2025-45574 Malicious code in polaris-io-react-bootstrap-polaris (npm)

The package polaris-io-react-bootstrap-polaris was found to contain malicious code...

CVE-2025-58834 WordPress short.io Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gugu short.io wp-shortcm allows DOM-Based XSS.This issue affects short.io: from n/a through = 2.4.2...

CVE-2025-58802 WordPress TrustMate.io – WooCommerce integration plugin <= 1.16.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in michalzagdan TrustMate.io – WooCommerce integration trustmate-io-integration-for-woocommerce allows Cross Site Request Forgery.This issue affects TrustMate.io – WooCommerce integration: from n/a through = 1.16.0...

OESA-2025-2155 gnuplot security update

Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...