CVE-2025-29788

CVE-2025-29788 affects the Sylius PayPal Plugin (Sylius Core Team) for PayPal Commerce. In versions prior to 1.6.1, 1.7.1, and 2.0.1, a vulnerability allows manipulating the final PayPal payment amount when a user changes the item quantity in the cart after initiating PayPal Express Checkout. Pay...

CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

PayPal Plugin 安全漏洞

PayPal Plugin is an open source plugin for the PayPal commerce platform from Sylius eCommerce. A security vulnerability exists in PayPal Plugin versions prior to 1.6.1, prior to 1.7.1, and prior to 2.0.1, which stems from payment amount manipulation and could lead to fraud...

Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in user-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8193a8f2fe2711193c348748cc627a0d0be2868b586830abaf1fe5b94d867c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oauth2-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cc95085eb1819e853bafa9792a2e3d1b7b761fd85657e25b110586cbb78d997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2429 Malicious code in user-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8193a8f2fe2711193c348748cc627a0d0be2868b586830abaf1fe5b94d867c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2397 Malicious code in oauth2-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cc95085eb1819e853bafa9792a2e3d1b7b761fd85657e25b110586cbb78d997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2398 Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paymentread-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99ea0fd7ce8df578106ddafd97e7ce60c03a1b0c1481c5a1caa636edd634246b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2447 Malicious code in paymentread-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99ea0fd7ce8df578106ddafd97e7ce60c03a1b0c1481c5a1caa636edd634246b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2446 Malicious code in paymentlookup-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a353126553c901a947450d8496b7b7479aa1c0b81c8cbbe5784801c4304be21b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paymentlookup-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a353126553c901a947450d8496b7b7479aa1c0b81c8cbbe5784801c4304be21b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoiceread-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4462bd23e04580838c5d69582dd0687b88a333d82d6b64a876c17bbcdf7f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2444 Malicious code in invoiceread-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4462bd23e04580838c5d69582dd0687b88a333d82d6b64a876c17bbcdf7f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A week in security (March 3 – March 9)

Last week on Malwarebytes Labs: TikTok: Major investigation launched into platform’s use of children’s data PayPal scam abuses Docusign API to spread phishy emails Android zero-day vulnerabilities actively abused. Update as soon as you can I spoke to a task scammer. Here’s how it went Android...

MAL-2025-2221 Malicious code in userbridge-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0146b1598c87e386ded31eb79929185a8d623f2541a8ef352804662a2ec1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in userbridge-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0146b1598c87e386ded31eb79929185a8d623f2541a8ef352804662a2ec1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2222 Malicious code in userrelationship-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522db266cc5ee9a741f9a3fde1a0f9e69cd84419296d3011e1e89833d068d06c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...