Malicious code in backend-odin-parcel-meteor (npm)

The package backend-odin-parcel-meteor was found to contain malicious code...

MAL-2025-26250 Malicious code in meteor-kinetic-procyon-vega (npm)

The package meteor-kinetic-procyon-vega was found to contain malicious code...

MAL-2025-26241 Malicious code in meteor-beetroot-ha6w (npm)

The package meteor-beetroot-ha6w was found to contain malicious code...

MAL-2025-23609 Malicious code in janus-meteor-toml-oauth (npm)

The package janus-meteor-toml-oauth was found to contain malicious code...

MAL-2025-26240 Malicious code in meteor-asteroid-zsg0 (npm)

The package meteor-asteroid-zsg0 was found to contain malicious code...

MAL-2025-31159 Malicious code in quasar-fusion-eslint-meteor (npm)

The package quasar-fusion-eslint-meteor was found to contain malicious code...

MAL-2025-26547 Malicious code in moat-meteor-lhkc (npm)

The package moat-meteor-lhkc was found to contain malicious code...

MAL-2025-26242 Malicious code in meteor-cherry-9fhd (npm)

The package meteor-cherry-9fhd was found to contain malicious code...

MAL-2025-26251 Malicious code in meteor-kiwi-6l1d (npm)

The package meteor-kiwi-6l1d was found to contain malicious code...

MAL-2025-24523 Malicious code in kinetic-blackhole-meteor-global (npm)

The package kinetic-blackhole-meteor-global was found to contain malicious code...

Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4852 Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6553

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

CVE-2024-12073

The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slideurlvalue' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2024-53561

A remote code execution RCE vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary code via a crafted request...

CVE-2024-53563

A stored cross-site scripting XSS vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2024-52493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Leuze Meteor Slides meteor-slides allows Stored XSS.This issue affects Meteor Slides: from n/a through = 1.5.7...

CVE-2023-26543

Cross-Site Request Forgery CSRF vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin = 3.1.4 versions...

CVE-2022-4486

The Meteor Slides WordPress plugin before 1.5.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2025-4727

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...