Malicious Package

Overview @capibar.chat/ui-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in one-view-chat-ui-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a53a27e69da28c6b1eb4c8f441a2e0723e4b7b5c0aaaab08233f5dd41b76308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview one-view-chat-ui-module is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

EUVD-2025-208909

SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...

CVE-2025-63260

CVE-2025-63260 affects SyncFusion 30.1.37 . The vulnerability is a Cross Site Scripting (XSS) issue arising in the product’s UI components: the Document-Editor reply to comment field and the Chat-UI chat message . The confirmed impact is XSS, enabling injection of script via user-supplied input i...

Malicious code in masons-chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14b2f219e65b904ce4942da955e90e752927f635e650295337be7bc2eedfaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5283 Malicious code in masons-chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14b2f219e65b904ce4942da955e90e752927f635e650295337be7bc2eedfaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comet-chat-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6f38c4d9dd2413e237c8d146d5fcf11d04f613910b552a32a52b3e4cf199f6 The OpenSSF Package Analysis project identified 'comet-chat-react-ui-kit' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

com.codenameone:admob-fullscreen-common (>=1.0.1 <=1.0.5), com.codenameone:admob-fullscreen-javase (>=1.0.1 <=1.0.5) +37 more potentially affected by CVE-2022-4903 via com.codenameone:codenameone-core (>=7.0.10 <=7.0.69)

com.codenameone:codenameone-core MAVEN version =7.0.10, =1.0.1, =1.0.1, =7.0.10, =7.0.236, =7.0.10, =7.0.10, =7.0.10, =7.0.242 and more Source cves: CVE-2022-4903 Source advisory: OSV:GHSA-P6XQ-9H8R-V544...

MAL-2022-576 Malicious code in @sbtweb/chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98da8f5b939eeb94617bce10dd625c39b582c21f0057799cdc2ae93196291802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sbtweb/chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98da8f5b939eeb94617bce10dd625c39b582c21f0057799cdc2ae93196291802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...