MAL-2025-3092 Malicious code in at-validation-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 073941142afe6289331b83f586f09f0fc6d24a27aa0b14a392fd7ec429658e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in payoutsapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3138bfa1642d8493a633368a78332106126b9c776849c8525ab1fc491544935c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in at-authorize-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17db7733ab98695568b1f41dba8b8b5d956a4fefa940f73863c0d2b1e2974845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3063 Malicious code in at-authorize-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17db7733ab98695568b1f41dba8b8b5d956a4fefa940f73863c0d2b1e2974845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2890 Malicious code in paypal-url-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee5e504dfd1a8b2c6e07c8e238a743be5b370d288b12b38eb37e16d82051ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-url-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee5e504dfd1a8b2c6e07c8e238a743be5b370d288b12b38eb37e16d82051ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shipmentdetails-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9772823042f7d0864755c4a9eaa7cc42fedc152439eab6471b40fd5bf0b9d4e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2767 Malicious code in invoicetax-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20c92dcf9c299f39d6c6dade3b2cf88a9f249913877843b3bf54c6520eff9b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shipmenttrackingserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3a2c25dd8f797d3e201b38a02fde72e265a03a3528d4af7d6bdce2f4b4142e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoicetax-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20c92dcf9c299f39d6c6dade3b2cf88a9f249913877843b3bf54c6520eff9b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identitydocumentserv-multipart-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12bb417a686521f10c52162e16092d476b65d6b7679c76facfaa4655d2583908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in riskchallengeserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da27f27f9efcf0b2d496e909e97771157cccea447420e5fb908ed4e912fcce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in login-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cac3d08cc05b420823cdc610ccff52543abb55098b9e449b8baf64ec4db28b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2770 Malicious code in login-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cac3d08cc05b420823cdc610ccff52543abb55098b9e449b8baf64ec4db28b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cart Manipulation

sylius/paypal-plugin is vulnerable to cart manipulation. The vulnerability is due to improper order validation and enforcement after PayPal payment authorization, allowing users to alter their cart contents before finalizing the order...

CVE-2025-30152

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. Prior to 1.6.2, 1.7.2, and 2.0.2, a discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment authorization. If a user initiates a PayPal...

Payment Manipulation

Sylius PayPal Plugin is vulnerable to Payment Manipulation. The vulnerability is due to PayPal not receiving updated totals after item quantity changes, allowing attackers to pay less than the actual order value, causing financial losses for merchants...

Malicious code in paypal-product-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702cb794363fc21a16f5752a5c2d307a7270f7304ea6d429da5c1fbba25ad3ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2579 Malicious code in paypal-product-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702cb794363fc21a16f5752a5c2d307a7270f7304ea6d429da5c1fbba25ad3ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-HXG4-65P5-9W37 Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout

A discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment authorization. If a user initiates a PayPal transaction from a product page or the cart page and then returns to the order summary page, they can still manipulate the car...