Rewiring Democracy Series on The Renovator

Nathan E. Sanders and I are writing a series of essays on real-world examples of democratic technologies for The Renovator. I haven't been posting the full text on the blog because they're a bit long, but here are links. Part 1 is about the Japanese digital democracy party, Team Mirai. Part 2 is...

Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7601 Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7600 Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-22348

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

CVE-2026-22348

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

CVE-2026-22348 WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

CVE-2026-22348 WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

CVE-2026-22348

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

CVE-2026-22348

CVE-2026-22348 is a Missing Authorization vulnerability affecting Civic Cookie Control plugin (civic-cookie-control-8) with affected versions

WordPress plugin Civic Cookie Control has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-22348: Missing Authorization

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

CVE-2022-27254

The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626...

WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Civic Cookie Control versions = 1.53...

Malicious code in civic_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2d860b4da0030bda4bbe3a315e93818c59b7ee0d9679722c2ebfa61090fd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd40911f7acabab4aba8351804f1cd2b4fd381fbd37f6554acd7a62a81f0ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100408

Malicious code in civicgamefowlz3n npm...

EUVD-2025-100406

Malicious code in civicsilkwormz3n npm...

MAL-2025-125523 Malicious code in civic_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2d860b4da0030bda4bbe3a315e93818c59b7ee0d9679722c2ebfa61090fd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...