Malicious code in postcss-loader-dotenv-safe-mini-css-extract-plugin-supervisor (npm)

The package postcss-loader-dotenv-safe-mini-css-extract-plugin-supervisor was found to contain malicious code...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +32 more potentially affected by unknown CVE via style-format (>=0.0.0, <=2.0.0)

style-format NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.0, =0.0.2 - fd-select 1.0.0 - frp-tick 1.0.0 - generator-freekerneljs 0.6.0 - hearing-aid 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-34115...

MAL-2025-34114 Malicious code in style-dom (npm)

The package style-dom was found to contain malicious code...

MAL-2025-38672 Malicious code in vue-rt-style-kit-aks (npm)

The package vue-rt-style-kit-aks was found to contain malicious code...

MAL-2025-33298 Malicious code in singularity-ultra-style-loader-ionosphere (npm)

The package singularity-ultra-style-loader-ionosphere was found to contain malicious code...

MAL-2025-26608 Malicious code in module-speleology-style-loader-singularitarianism (npm)

The package module-speleology-style-loader-singularitarianism was found to contain malicious code...

MAL-2025-38451 Malicious code in virgo-jwt-style-loader-titan (npm)

The package virgo-jwt-style-loader-titan was found to contain malicious code...

MAL-2025-40447 Malicious code in yelp-style-utils (npm)

The package yelp-style-utils was found to contain malicious code...

MAL-2025-40203 Malicious code in yaml-perseus-gridsome-style-loader (npm)

The package yaml-perseus-gridsome-style-loader was found to contain malicious code...

MAL-2025-34115 Malicious code in style-format (npm)

The package style-format was found to contain malicious code...

MAL-2025-14662 Malicious code in app-pulse-style (npm)

The package app-pulse-style was found to contain malicious code...

Malicious code in iota-style-loader-lepton-cygnus (npm)

The package iota-style-loader-lepton-cygnus was found to contain malicious code...

Malicious code in terser-webpack-plugin-brane-prettier-style-loader (npm)

The package terser-webpack-plugin-brane-prettier-style-loader was found to contain malicious code...

Malicious code in style-console (npm)

The package style-console was found to contain malicious code...

CVE-2025-3703 WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

WordPress plugin CSS & JavaScript Toolbox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2019-17022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer does not escape characters. Because the resulting string is pasted directly int...

BIT-LIBPHP-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...

WordPress Gravity Forms Plugin 2.9.0.1 < 2.9.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediaburst:gravityforms"; if description...

MAL-2025-191809 Malicious code in packed-w3shi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d670904891ef361ef283e3f218f21b6e3758847277e8bccb0dbecd08b08971a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...