MAL-2025-47543 Malicious code in @sev-ui-verse/providers (npm)

The package @sev-ui-verse/providers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27efd3b5904168e110748f7dc2e817324614b5711aae935b5bfacdafe8364830 Any computer that has this package installed or running should be considered ful...

MAL-2025-47542 Malicious code in @sev-ui-verse/logger (npm)

The package @sev-ui-verse/logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736b665dd1cabd04e5660ae170127b7763b9e45f24f4044635de3ce7b1753401 Any computer that has this package installed or running should be considered fully...

MAL-2025-47535 Malicious code in @sev-ui-verse/event-tracking (npm)

The package @sev-ui-verse/event-tracking was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456d3a4ed1bb864eafcf6a65c30be392f9dc9ac1342ab0c1cd51cc463f11ff7f Any computer that has this package installed or running should be considere...

MAL-2025-47531 Malicious code in @sev-ui-verse/config-service (npm)

The package @sev-ui-verse/config-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 188aa603d30650e09cc52a7e6d86df9d9fa9e4bce6239596a6ee4a7a75a968bf Any computer that has this package installed or running should be considere...

MAL-2025-47539 Malicious code in @sev-ui-verse/i18next-config (npm)

The package @sev-ui-verse/i18next-config was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0a4074d88681a40324dc4f76ce6e6339cb36c218478b433434a961e47adfac2 Any computer that has this package installed or running should be considere...

Malicious code in @sev-ui-verse/core-models (npm)

The package @sev-ui-verse/core-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794fcad76f90e38dc1872c555e02d03512701d4d3a3ffc2a932ce9421fa1de97 Any computer that has this package installed or running should be considered...

Malicious Package

Overview @sev-ui-verse/logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @sev-ui-verse/workflow-context (npm)

The package @sev-ui-verse/workflow-context was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b34fd25464abdc87cdcff95770eff1bf8f142ad5407a6487236fcc5c76f72f14 Any computer that has this package installed or running should be...

MAL-2025-47545 Malicious code in @sev-ui-verse/react-query-utils (npm)

The package @sev-ui-verse/react-query-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7159ac6527ad39a63e64403ef1ba63e8895558c89c17cf8355a6bfee386a761 Any computer that has this package installed or running should be...

MAL-2025-47538 Malicious code in @sev-ui-verse/hooks-and-helpers (npm)

The package @sev-ui-verse/hooks-and-helpers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049160f2e90aa1d0d8bffb031d38446873f5a0aac9805e51720e06075e0e582 Any computer that has this package installed or running should be...

MAL-2025-47544 Malicious code in @sev-ui-verse/react-query-client (npm)

The package @sev-ui-verse/react-query-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 665474d528ec1e43349cea649e53f67e00e56ef1f98b376e17c5a672fa0a7270 Any computer that has this package installed or running should be...

Malicious code in @sev-ui-verse/providers (npm)

The package @sev-ui-verse/providers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27efd3b5904168e110748f7dc2e817324614b5711aae935b5bfacdafe8364830 Any computer that has this package installed or running should be considered ful...

Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

Malicious code in @sev-ui-verse/logger (npm)

The package @sev-ui-verse/logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736b665dd1cabd04e5660ae170127b7763b9e45f24f4044635de3ce7b1753401 Any computer that has this package installed or running should be considered fully...

MAL-2025-47536 Malicious code in @sev-ui-verse/feature-flag (npm)

The package @sev-ui-verse/feature-flag was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc96c567d6c79894a3b93f553e9e63bfa8dd6754e3113b6aebd1a4e8e58d82fd Any computer that has this package installed or running should be considered...

CVE-2025-4760

An authenticated stored cross-site scripting XSS vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript,...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

PT-2025-39388

⚠️ Critical Alert – CVE-2025-78901 • Zero-day in Telerik UI library actively exploited 🚨 • Affects thousands of .NET web apps 2025.3.1 • Mass scanning and ransomware attempts underway • Action: Patch immediately! CyberSecurity ZeroDay Telerik PatchNow NewTalics...

Exploit for Origin Validation Error in Edex-Ui_Project Edex-Ui

CVE-2023-30856 Security Patch for eDEX-UI ⚠️ Critical Secu...

GHSA-54J7-GRVR-9XWG Command Injection in adb-mcp MCP Server

Command Injection in adb-mcp MCP Server The MCP Server at https://github.com/srmorete/adb-mcp is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server is also published publicly to npm at...