MAL-2025-33085 Malicious code in shell-uglify-uglify-fast-grid (npm)

The package shell-uglify-uglify-fast-grid was found to contain malicious code...

MAL-2025-19196 Malicious code in ecosystem-iris-eab640-project (npm)

The package ecosystem-iris-eab640-project was found to contain malicious code...

MAL-2025-31443 Malicious code in quokka-quebec-9d0l (npm)

The package quokka-quebec-9d0l was found to contain malicious code...

MAL-2025-17272 Malicious code in coinrider (npm)

The package coinrider was found to contain malicious code...

MAL-2025-25393 Malicious code in link-eslint-config-jabbah-darkenergy (npm)

The package link-eslint-config-jabbah-darkenergy was found to contain malicious code...

MAL-2025-14329 Malicious code in almanan (npm)

The package almanan was found to contain malicious code...

MAL-2025-21917 Malicious code in gregarius (npm)

The package gregarius was found to contain malicious code...

MAL-2025-20264 Malicious code in fb-chat-shadow (npm)

The package fb-chat-shadow was found to contain malicious code...

MAL-2025-21374 Malicious code in gevpro (npm)

The package gevpro was found to contain malicious code...

MAL-2025-21028 Malicious code in fucoin (npm)

The package fucoin was found to contain malicious code...

MAL-2025-27199 Malicious code in nectar-glisten-nom856-project (npm)

The package nectar-glisten-nom856-project was found to contain malicious code...

MAL-2025-19112 Malicious code in ecelue (npm)

The package ecelue was found to contain malicious code...

OPENSUSE-SU-2025:15387-1 libmozjs-128-0-128.13.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-30061

Name of the Vulnerable Software and Affected Versions form-data versions 2.5.4 form-data versions 3.0.0 through 3.0.3 form-data versions 4.0.0 through 4.0.3 Description A vulnerability exists in the form-data JavaScript library due to the use of insufficiently random values when generating bounda...

CVE-2025-53569

Cross-Site Request Forgery CSRF vulnerability in Trust Payments Trust Payments Gateway for WooCommerce JavaScript Library trust-payments-gateway-3ds2 allows Cross Site Request Forgery.This issue affects Trust Payments Gateway for WooCommerce JavaScript Library: from n/a through = 1.3.6...

CVE-2025-2537

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled ThickBox JavaScript library version 3.1 in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-53569

Cross-Site Request Forgery CSRF vulnerability in Trust Payments Trust Payments Gateway for WooCommerce JavaScript Library trust-payments-gateway-3ds2 allows Cross Site Request Forgery.This issue affects Trust Payments Gateway for WooCommerce JavaScript Library: from n/a through = 1.3.6...

CVE-2025-53569

CVE-2025-53569 covers a CSRF vulnerability in the Trust Payments Gateway for WooCommerce (JavaScript Library). The issue affects the plugin’s JavaScript library up to and including version 1.3.6. The connected sources consistently describe CSRF as the flaw, with no explicit exploit details provid...

CVE-2025-53569 WordPress Trust Payments Gateway for WooCommerce (JavaScript Library) plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Trust Payments Trust Payments Gateway for WooCommerce JavaScript Library trust-payments-gateway-3ds2 allows Cross Site Request Forgery.This issue affects Trust Payments Gateway for WooCommerce JavaScript Library: from n/a through = 1.3.6...

CVE-2025-53569 WordPress Trust Payments Gateway for WooCommerce (JavaScript Library) plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Trust Payments Trust Payments Gateway for WooCommerce JavaScript Library trust-payments-gateway-3ds2 allows Cross Site Request Forgery.This issue affects Trust Payments Gateway for WooCommerce JavaScript Library: from n/a through = 1.3.6...