EUVD-2025-80912

Malicious code in preciousdragonflydumbs npm...

EUVD-2025-71416

Malicious code in preciouscanidz3n npm...

EUVD-2025-62586

Malicious code in preciousemurequirement npm...

EUVD-2025-62585

Malicious code in preciousswanz3n npm...

Malicious code in precious-aquamarine-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392ab7e4e3b593e707182fe8a995a31152a5657a44d11eacd99aec8562953789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52690

Malicious code in precious-amber-fish npm...

EUVD-2025-52688

Malicious code in precious-aquamarine-coral npm...

EUVD-2025-52686

Malicious code in precious-crimson-crow npm...

EUVD-2025-52687

Malicious code in precious-brown-manatee npm...

EUVD-2025-52685

Malicious code in precious-indigo-ladybug npm...

EUVD-2025-52684

Malicious code in precious-tomato-shrew npm...

EUVD-2025-52683

Malicious code in precious-turquoise-crocodile npm...

EUVD-2025-52689

Malicious code in precious-apricot-stingray npm...

Malicious code in precious-crimson-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ecf1921767e89ded31d99709191b8c6cede4da7611c0c0d65c4cbd102303fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

What to Know About the Shocking Louvre Jewelry Heist

In just seven minutes, the thieves took off with crown jewels containing with thousands of diamonds along with other precious gems...

MAL-2025-15133 Malicious code in ava-ilable-down-load-mp3-today-33142-precious-falling-tmwor-vsvzvj (npm)

The package ava-ilable-down-load-mp3-today-33142-precious-falling-tmwor-vsvzvj was found to contain malicious code...

WordPress Precious Metals Charts and Widgets for WordPress plugin <= 1.2.8 - Authenticated (Contributor+) Stored Cross-site Scripting vulnerability

Authenticated Contributor+ Stored Cross-site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Precious Metals Charts and Widgets for WordPress versions = 1.2.8...

CVE-2024-13572

The Precious Metals Charts and Widgets for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nfusion-widget' shortcode in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. Th...

WordPress plugin Precious Metals Charts and Widgets for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2024-13572: Improper Neutralization of Input During Web Page Generation

The Precious Metals Charts and Widgets for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nfusion-widget' shortcode in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. Th...