CVE-2025-63260

SyncFusion version 30.1.37 is vulnerable to Cross-Site Scripting (XSS) . The vulnerability exists in the Document-Editor reply to comment field and the Chat-UI Chat message components. An attacker could exploit these flaws to execute malicious scripts in the context of the user's session. Exploit...

@like-a-startup/matildex-chat (>=1.0.8, <=1.0.14), @n8n/chat (>=0.46.0, <=0.68.0) +3 more potentially affected by CVE-2026-25054 via @n8n/design-system (>=1.88.0, <=1.110.0)

@n8n/design-system NPM version =1.88.0, =1.0.8, =0.46.0, =1.0.0, =1.0.4 - navis-n8n-chat-ui 1.0.1 Source cves: CVE-2026-25054 Source advisory: SNYK:JS-N8NDESIGNSYSTEM-15225250...

Malicious code in masons-chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14b2f219e65b904ce4942da955e90e752927f635e650295337be7bc2eedfaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5283 Malicious code in masons-chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14b2f219e65b904ce4942da955e90e752927f635e650295337be7bc2eedfaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comet-chat-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6f38c4d9dd2413e237c8d146d5fcf11d04f613910b552a32a52b3e4cf199f6 The OpenSSF Package Analysis project identified 'comet-chat-react-ui-kit' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in @sbtweb/chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98da8f5b939eeb94617bce10dd625c39b582c21f0057799cdc2ae93196291802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-576 Malicious code in @sbtweb/chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98da8f5b939eeb94617bce10dd625c39b582c21f0057799cdc2ae93196291802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...