Malicious code in @zalastax/nolb-nodebb-plugin-m (npm)

The package @zalastax/nolb-nodebb-plugin-m was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-w (npm)

The package @zalastax/nolb-nodebb-plugin-w was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-n (npm)

The package @zalastax/nolb-nodebb-plugin-n was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-6 (npm)

The package @zalastax/nolb-nodebb-plugin-6 was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-e (npm)

The package @zalastax/nolb-nodebb-plugin-e was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-s (npm)

The package @zalastax/nolb-nodebb-plugin-s was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-x (npm)

The package @zalastax/nolb-nodebb-plugin-x was found to contain malicious code...

MAL-2025-12746 Malicious code in @zalastax/nolb-nodebb-plugin-u (npm)

The package @zalastax/nolb-nodebb-plugin-u was found to contain malicious code...

Malicious code in nodebb-plugin-spaffnerds (npm)

The package nodebb-plugin-spaffnerds was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin-p (npm)

The package @zalastax/nolb-nodebb-plugin-p was found to contain malicious code...

MAL-2025-12749 Malicious code in @zalastax/nolb-nodebb-plugin-x (npm)

The package @zalastax/nolb-nodebb-plugin-x was found to contain malicious code...

MAL-2025-12743 Malicious code in @zalastax/nolb-nodebb-plugin-r (npm)

The package @zalastax/nolb-nodebb-plugin-r was found to contain malicious code...

MAL-2025-12726 Malicious code in @zalastax/nolb-nodebb-plugin-a (npm)

The package @zalastax/nolb-nodebb-plugin-a was found to contain malicious code...

MAL-2025-12729 Malicious code in @zalastax/nolb-nodebb-plugin-d (npm)

The package @zalastax/nolb-nodebb-plugin-d was found to contain malicious code...

MAL-2025-12744 Malicious code in @zalastax/nolb-nodebb-plugin-s (npm)

The package @zalastax/nolb-nodebb-plugin-s was found to contain malicious code...

MAL-2025-12751 Malicious code in @zalastax/nolb-nodebb-plugin-z (npm)

The package @zalastax/nolb-nodebb-plugin-z was found to contain malicious code...

Malicious code in nodebb-plugin-sirius (npm)

The package nodebb-plugin-sirius was found to contain malicious code...

MAL-2025-12732 Malicious code in @zalastax/nolb-nodebb-plugin-g (npm)

The package @zalastax/nolb-nodebb-plugin-g was found to contain malicious code...

CVE-2020-15156

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...

Malicious code in nodebb-plugin-sso-auto-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3ab1b77199e67562a75d535a0d6c88f5d8d4c76b8df6d226e9528b0e050006 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...