Malicious code in babel-plugin-transform-inject-template (npm)

The package babel-plugin-transform-inject-template was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-14603

The WowOptin: Next-Gen Popup Maker WordPress plugin (versions before 1.4.38 ) is vulnerable to an improper access control flaw on a REST endpoint . This lack of proper authorization allows unauthenticated users to perform unauthorized actions, specifically the ability to disable all opt-in forms ...

MAL-2025-15297 Malicious code in babel-plugin-transform-inject-template (npm)

The package babel-plugin-transform-inject-template was found to contain malicious code...

Malicious code in babel-plugin-transform-inject-template (npm)

The package babel-plugin-transform-inject-template was found to contain malicious code...