EUVD-2025-56845

Malicious code in uncertainbadgerz3n npm...

Malicious code in painful_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495d5f65c98d10b94cc718c2d6c77f48f2758a37a347ec736d7d62c101309fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50712

Malicious code in alternativebadgerz3n npm...

EUVD-2025-45346

Malicious code in securebadgerz3n npm...

EUVD-2015-1084

Malware in sbrugna...

EUVD-2024-17064

Malicious code in bioql PyPI...

EUVD-2024-17062

Malicious code in bioql PyPI...

EUVD-2025-21946

Malicious code in bioql PyPI...

Malicious code in badger-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 102e103c2148dd46b3b7b80cbf9641deea29213407e46ee74af433da247bd9ef The OpenSSF Package Analysis project identified 'badger-doc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6810 Malicious code in badger-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 102e103c2148dd46b3b7b80cbf9641deea29213407e46ee74af433da247bd9ef The OpenSSF Package Analysis project identified 'badger-doc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-7655

The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' shortcode in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Live Stream Badger plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Live Stream Badger versions = 1.4.3...

CVE-2025-7655

The WordPress plugin Live Stream Badger (WordPress) is vulnerable to Stored Cross-Site Scripting via the livestream shortcode in all versions up to and including 1.4.3. The issue arises from insufficient input sanitization and output escaping on user-supplied attributes, enabling authenticated at...

CVE-2025-7655 Live Stream Badger <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' shortcode in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-7655 Live Stream Badger <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' shortcode in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Live Stream Badger 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-30110 · WordPress · Live Stream Badger

Name of the Vulnerable Software and Affected Versions: Live Stream Badger plugin for WordPress versions up to and including 1.4.3 Description: The Live Stream Badger plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s livestream shortcode. Insufficient input...

CVE-2024-36581

A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-database.esm...

CVE-2015-10071

A vulnerability was found in gitter-badger ezpublish-modern-legacy. It has been rated as problematic. This issue affects some unknown processing of the file kernel/user/forgotpassword.php. The manipulation leads to weak password recovery. The complexity of an attack is rather high. The exploitati...

Malware Campaign Lures Users With Fake W2 Form

The following analysts contributed to the research: Evan McCann, Matt Smith, Ipek Solak, Jake McMahon Rapid7 has recently observed an campaign targeting users searching for W2 forms using the Microsoft search engine Bing. Users are subsequently directed to a fake IRS website, enticing them to...