MAL-2025-21374 Malicious code in gevpro (npm)

The package gevpro was found to contain malicious code...

MAL-2025-14329 Malicious code in almanan (npm)

The package almanan was found to contain malicious code...

MAL-2025-19196 Malicious code in ecosystem-iris-eab640-project (npm)

The package ecosystem-iris-eab640-project was found to contain malicious code...

MAL-2025-31443 Malicious code in quokka-quebec-9d0l (npm)

The package quokka-quebec-9d0l was found to contain malicious code...

MAL-2025-21028 Malicious code in fucoin (npm)

The package fucoin was found to contain malicious code...

MAL-2025-25616 Malicious code in loveshack (npm)

The package loveshack was found to contain malicious code...

MAL-2025-33085 Malicious code in shell-uglify-uglify-fast-grid (npm)

The package shell-uglify-uglify-fast-grid was found to contain malicious code...

MAL-2025-19112 Malicious code in ecelue (npm)

The package ecelue was found to contain malicious code...

MAL-2025-29205 Malicious code in pi-async-runtime-report-sun (npm)

The package pi-async-runtime-report-sun was found to contain malicious code...

Malicious code in lexicrypt (npm)

The package lexicrypt was found to contain malicious code...

MAL-2025-25393 Malicious code in link-eslint-config-jabbah-darkenergy (npm)

The package link-eslint-config-jabbah-darkenergy was found to contain malicious code...

Malicious code in javascript-astrochemistry-panspermia-mongoose (npm)

The package javascript-astrochemistry-panspermia-mongoose was found to contain malicious code...

MAL-2025-26132 Malicious code in mechatronics-ophiuchus-loopback-auth0 (npm)

The package mechatronics-ophiuchus-loopback-auth0 was found to contain malicious code...

MAL-2025-18536 Malicious code in dmension (npm)

The package dmension was found to contain malicious code...

MAL-2025-20264 Malicious code in fb-chat-shadow (npm)

The package fb-chat-shadow was found to contain malicious code...

MAL-2025-30103 Malicious code in project-dskxm-mike (npm)

The package project-dskxm-mike was found to contain malicious code...

MAL-2025-33576 Malicious code in soap-repository (npm)

The package soap-repository was found to contain malicious code...

OPENSUSE-SU-2025:15387-1 libmozjs-128-0-128.13.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-30061

Name of the Vulnerable Software and Affected Versions form-data versions 2.5.4 form-data versions 3.0.0 through 3.0.3 form-data versions 4.0.0 through 4.0.3 Description A vulnerability exists in the form-data JavaScript library due to the use of insufficiently random values when generating bounda...

CVE-2025-53569

Cross-Site Request Forgery CSRF vulnerability in Trust Payments Trust Payments Gateway for WooCommerce JavaScript Library trust-payments-gateway-3ds2 allows Cross Site Request Forgery.This issue affects Trust Payments Gateway for WooCommerce JavaScript Library: from n/a through = 1.3.6...