CVE-2025-43774

...

CVE-2025-43774

Connected sources describe a reflected XSS in Liferay Portal 7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.17, exploitable when a remote authenticated user injects JavaScript via the Style Book theme name. The issue is reflected in the user’s browser; no concrete fix/version is provided in the supp...

PT-2025-36537

Name of the Vulnerable Software and Affected Versions: Liferay Portal version 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.17 Description: A reflected cross-site scripting XSS vulnerability exists in Liferay Portal and DXP. A remote authenticated user can inject JavaScript code via th...

Malicious code in archaeometry-hercules-singularitarianism-style-loader (npm)

The package archaeometry-hercules-singularitarianism-style-loader was found to contain malicious code...

Malicious code in csv-readable-exosphere-style-loader (npm)

The package csv-readable-exosphere-style-loader was found to contain malicious code...

Malicious code in optimize-css-assets-webpack-plugin-cassini-perturbation-biomimicry (npm)

The package optimize-css-assets-webpack-plugin-cassini-perturbation-biomimicry was found to contain malicious code...

Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)

The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...

Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)

The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...

Malicious code in style-loader-troposphere-speleology-link (npm)

The package style-loader-troposphere-speleology-link was found to contain malicious code...

Malicious code in vega-areology-perseus-style-loader (npm)

The package vega-areology-perseus-style-loader was found to contain malicious code...

Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)

The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...

MAL-2025-46154 Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)

The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...

MAL-2025-46497 Malicious code in vega-areology-perseus-style-loader (npm)

The package vega-areology-perseus-style-loader was found to contain malicious code...

MAL-2025-45562 Malicious code in pino-style-loader-uninstall-hyperion (npm)

The package pino-style-loader-uninstall-hyperion was found to contain malicious code...

MAL-2025-46153 Malicious code in style-loader-troposphere-speleology-link (npm)

The package style-loader-troposphere-speleology-link was found to contain malicious code...

MAL-2025-46151 Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)

The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...

Malicious code in pino-style-loader-uninstall-hyperion (npm)

The package pino-style-loader-uninstall-hyperion was found to contain malicious code...

MAL-2025-43915 Malicious code in csv-readable-exosphere-style-loader (npm)

The package csv-readable-exosphere-style-loader was found to contain malicious code...

MAL-2025-44142 Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm)

The package epimetheus-html-webpack-plugin-markdown-style-loader was found to contain malicious code...

MAL-2025-42964 Malicious code in @trp-beacon-ui-kit/style-tokens (npm)

The package @trp-beacon-ui-kit/style-tokens was found to contain malicious code...