MAL-2026-1123 Malicious code in @yaoii-bails/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1d0d12bd58b983f5d0429e35aabbe5aff4e7206c1198199dff00f8d7edc3c6 The package @yaoii-bails/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1115 Malicious code in chai-vest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92343f543acb60949d618ec06160013b1536a63f3db5431a4e24b1eaac2ccae The package chai-vest was found to contain malicious code. Source: ghsa-malware 2d3a82ac6f8ebd7b7eba324f04e78d43fccef2f3ddf20c24014f4768dc50731d Any...

Malicious code in chai-vest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92343f543acb60949d618ec06160013b1536a63f3db5431a4e24b1eaac2ccae The package chai-vest was found to contain malicious code. Source: ghsa-malware 2d3a82ac6f8ebd7b7eba324f04e78d43fccef2f3ddf20c24014f4768dc50731d Any...

MAL-2026-1116 Malicious code in js-nodecat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c204576b5f5aefba60246b88360a50e23f958c2023883088bdf6a151ccb7d9 The package js-nodecat was found to contain malicious code. Source: ghsa-malware 1f19647e158d2037b4d4d79e931211560b4b7c72e33defc94f8c4552775f601b Any...

MAL-2026-1108 Malicious code in hapi-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90adf52f1b608bcddb8f6471e64ded19817bef1b8aa1715256182f0e7a3ab690 The package hapi-lint was found to contain malicious code. Source: ghsa-malware 388b8a57423bf6789ce0a82c22d6856663fcbc1cd2ff7ce5c6f7ef701567c19e Any...

Malicious code in hapi-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90adf52f1b608bcddb8f6471e64ded19817bef1b8aa1715256182f0e7a3ab690 The package hapi-lint was found to contain malicious code. Source: ghsa-malware 388b8a57423bf6789ce0a82c22d6856663fcbc1cd2ff7ce5c6f7ef701567c19e Any...

MAL-2026-1101 Malicious code in argonist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2aecefee8a1b9d2c70f2c881352080e02186d102f05f82b1c9942a80e899946 The package argonist was found to contain malicious code. Source: ghsa-malware e3e27b60d79e256cf34ebd7b3f37d626812ed621fff44c3b60b08b3144c0f2db Any...

Malicious code in typoriem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e473ba3785bff62ce2994c6f09309570eea69282acc5438f015d85ca0e61cf5c The package typoriem was found to contain malicious code. Source: ghsa-malware 4dfd9fb9cb096af0fd4d1db216d08d1ae5592ef63c0c97c66a491b00ebdde43e Any...

MAL-2026-1113 Malicious code in typoriem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e473ba3785bff62ce2994c6f09309570eea69282acc5438f015d85ca0e61cf5c The package typoriem was found to contain malicious code. Source: ghsa-malware 4dfd9fb9cb096af0fd4d1db216d08d1ae5592ef63c0c97c66a491b00ebdde43e Any...

MAL-2026-1110 Malicious code in loadash-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a6b55079998d38c9458ab6cae73e677bccc96d3965a9e6584e85c0450c2695 The package loadash-lint was found to contain malicious code. Source: ghsa-malware 9ad2a23ceb26c4b6ac051ac94acfa976eda403c11d9eaf9833d2b9206a5d2155 A...

Malicious code in sequelization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b2b9d323b090f464c9192617e5837b462aaaf654d9da5aca02dd9deadd516 The package sequelization was found to contain malicious code. Source: ghsa-malware 98293858bc27dde3605f9e7765b31d966632968ae9c66036f2bce73a8dfe7ddb...

MAL-2026-1112 Malicious code in sequelization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b2b9d323b090f464c9192617e5837b462aaaf654d9da5aca02dd9deadd516 The package sequelization was found to contain malicious code. Source: ghsa-malware 98293858bc27dde3605f9e7765b31d966632968ae9c66036f2bce73a8dfe7ddb...

MAL-2026-1109 Malicious code in jsnwebapptoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c045f3e6ca79915965788d10accc663e97bacc01fd6d94baa9bf781c38a0c The package jsnwebapptoken was found to contain malicious code. Source: ghsa-malware 26490b6a28e0b832aa5d386d750166e3cab2c2eb776706c9cf05fa16757758c6...

Malicious code in jsnwebapptoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c045f3e6ca79915965788d10accc663e97bacc01fd6d94baa9bf781c38a0c The package jsnwebapptoken was found to contain malicious code. Source: ghsa-malware 26490b6a28e0b832aa5d386d750166e3cab2c2eb776706c9cf05fa16757758c6...

Malicious code in daytonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64164959c731481a5fc4117f26a4e9716c24483ac92839fc7945131c96232801 The package daytonjs was found to contain malicious code. Source: ghsa-malware 2961273f0dc9c6f1bc13bb7c4e47797f2eae23dc3dfcafbf3f58984225127c16 Any...

MAL-2026-1105 Malicious code in daytonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64164959c731481a5fc4117f26a4e9716c24483ac92839fc7945131c96232801 The package daytonjs was found to contain malicious code. Source: ghsa-malware 2961273f0dc9c6f1bc13bb7c4e47797f2eae23dc3dfcafbf3f58984225127c16 Any...

MAL-2026-1111 Malicious code in mqttoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aca93be8c1540d3f53af3e84ab54ac100f00390a05d10931f80ca2941beeb39 The package mqttoken was found to contain malicious code. Source: ghsa-malware c91a888cf7be32a16813cf296ec094ba2d56bf4706c030246a92f686bac1ea2c Any...

Malicious code in formmiderable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a421f6bd77d5bfcd4d08aaedcffd8b55c430c85084ccce52372a6700eaac6d50 The package formmiderable was found to contain malicious code. Source: ghsa-malware 5d9ce26e5d5c2d433753869317d12725c4dfdb05728a86f4acf96b75f8d16d50...

MAL-2026-1107 Malicious code in formmiderable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a421f6bd77d5bfcd4d08aaedcffd8b55c430c85084ccce52372a6700eaac6d50 The package formmiderable was found to contain malicious code. Source: ghsa-malware 5d9ce26e5d5c2d433753869317d12725c4dfdb05728a86f4acf96b75f8d16d50...

CVE-2026-28561 wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without output escaping across multiple theme template files. On multisite installations or with a compromised admin account,...