PT-2025-47676

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

WordPress Shortcodes Bootstrap plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcodes Bootstrap versions = 1.1...

Malicious code in bootstrap-cluster-fornax-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68c8b328a4fdb50634ae09eb0a5a69120d6aedc072cba9562ccade41a2e33e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-event-bootstrap-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884f8f8fe69d800ff13733a4da5865fd63f1846cee21ddf7997124ae41773ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-bootstrap-lynx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176257

Malicious code in spectroscopy-webdriver-manager-await-bootstrap npm...

EUVD-2025-177634

Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism npm...

EUVD-2025-176974

Malicious code in protractor-nightwatch-schema-bootstrap npm...

EUVD-2025-176821

Malicious code in radiant-event-bootstrap-geodynamo npm...

EUVD-2025-176651

Malicious code in reveal-md-cosmos-apex-bootstrap npm...

EUVD-2025-176502

Malicious code in schema-bunyan-magnetar-bootstrap npm...

EUVD-2025-177872

Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...

EUVD-2025-177847

Malicious code in middleware-antares-bootstrap-fork npm...

EUVD-2025-178189

Malicious code in kinetic-ora-bootstrap-redshift npm...

EUVD-2025-179653

Malicious code in command-bootstrap-exoplanetology-paleontology npm...

EUVD-2025-179070

Malicious code in eridanus-react-bootstrap-telesto-yaml npm...

EUVD-2025-177521

Malicious code in npm-equinox-bootstrap-baryon npm...

EUVD-2025-177447

Malicious code in ophiuchus-bootstrap-perseus-airbnb npm...

EUVD-2025-175940

Malicious code in titan-bootstrap-lynx-comet npm...

MAL-2025-185892 Malicious code in bootstrap-semantic-release-pulsar-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6105ade3946c0a9b9a29cac5be3458e9ab96773616c0e664047e26dcd915a13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...