EUVD-2025-145782

Malicious code in charlottelee npm...

EUVD-2025-96042

Malicious code in ogi-dradag64-breki npm...

EUVD-2025-90283

Malicious code in lutfi-lapis42-miaww npm...

EUVD-2025-88789

Malicious code in sinta-tahu91-miaww npm...

EUVD-2025-50370

Malicious code in disturbingaphidz3n npm...

EUVD-2025-39764

Malicious code in erick-kue74-sluey npm...

EUVD-2025-38026

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...

EUVD-2025-37624

The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing nonce validation on the updatewpglobalscreenoptions action handler. This makes it possible for unauthenticated attackers to modify global...

EUVD-2025-37684

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An attacker with physical access may be able to access contacts from the lock screen...