MAL-2025-190617 Malicious code in doordash-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2c2fc3e4bccd347a784ca9271e03d26dcc7e89c2e697f9e04b2e1e26cfc80d The package doordash-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190615 Malicious code in snapchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80100098d97efb3e0e143ef48523c4bf1724d39fe46eec08532a084d22ef911d The package snapchat-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in snapchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80100098d97efb3e0e143ef48523c4bf1724d39fe46eec08532a084d22ef911d The package snapchat-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190613 Malicious code in linkedin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087523af82d7438462bdf269292570db2114097ae1ee24979225379641e15f6 The package linkedin-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in linkedin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087523af82d7438462bdf269292570db2114097ae1ee24979225379641e15f6 The package linkedin-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190614 Malicious code in sentry-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b344e30280f8d412e7bb23ee828cea19637206f94ef992a20c372957c53b32 The package sentry-ui was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198555

Malicious code in sentry-ui npm...

Malicious code in sentry-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b344e30280f8d412e7bb23ee828cea19637206f94ef992a20c372957c53b32 The package sentry-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190611 Malicious code in hilton-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865ea8e9dc8af2f134e9b7fc318eceef8ff54af8fc491d1feb2d2c5788441f4 The package hilton-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in hilton-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865ea8e9dc8af2f134e9b7fc318eceef8ff54af8fc491d1feb2d2c5788441f4 The package hilton-ui was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198556

Malicious code in hilton-ui npm...

MAL-2025-190616 Malicious code in uber-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb767de450fdafc6d2aa88f77a1f0a95188ddb866565c91258711f3434ce561e The package uber-ui was found to contain malicious code. Source: ossf-package-analysis 9706819391825d94f76cf6530978ae5e88f3a58ccc386090ef6523825393fb...

EUVD-2025-198557

Malicious code in uber-ui npm...

Malicious code in instacart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2fadf49fd1948b4d1d7049083d559cfdaec04a7247f1355729b1278b9bd3e2 The package instacart-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190612 Malicious code in instacart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2fadf49fd1948b4d1d7049083d559cfdaec04a7247f1355729b1278b9bd3e2 The package instacart-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in uber-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb767de450fdafc6d2aa88f77a1f0a95188ddb866565c91258711f3434ce561e The package uber-ui was found to contain malicious code. Source: ossf-package-analysis 9706819391825d94f76cf6530978ae5e88f3a58ccc386090ef6523825393fb...

CVE-2025-11815 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the uipsavesiteoption function in all versions up to, and including, 3.5.08. This makes it possible for authenticate...

CVE-2025-36153

IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-36153 IBM Concert Cross-Site Scripting

IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-55127

HackerOne community member Dao Hoang Anh yoyomiski has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the...