MAL-2025-45471 Malicious code in optimize-css-assets-webpack-plugin-cassini-perturbation-biomimicry (npm)

The package optimize-css-assets-webpack-plugin-cassini-perturbation-biomimicry was found to contain malicious code...

MAL-2025-45472 Malicious code in optimize-css-assets-webpack-plugin-fornax-global-markdownlint (npm)

The package optimize-css-assets-webpack-plugin-fornax-global-markdownlint was found to contain malicious code...

MAL-2025-45561 Malicious code in pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin (npm)

The package pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin was found to contain malicious code...

MAL-2025-45812 Malicious code in repository-helios-mini-css-extract-plugin-gemini (npm)

The package repository-helios-mini-css-extract-plugin-gemini was found to contain malicious code...

MAL-2025-46753 Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm)

The package yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin was found to contain malicious code...

Malicious code in optimize-css-assets-webpack-plugin-astrophysics-mechatronics-brane (npm)

The package optimize-css-assets-webpack-plugin-astrophysics-mechatronics-brane was found to contain malicious code...

Malicious code in optimize-css-assets-webpack-plugin-ultra-registry-nuxtjs (npm)

The package optimize-css-assets-webpack-plugin-ultra-registry-nuxtjs was found to contain malicious code...

Malicious code in rest-changelog-mini-css-extract-plugin-eslint-plugin (npm)

The package rest-changelog-mini-css-extract-plugin-eslint-plugin was found to contain malicious code...

Malicious code in selenology-biohacking-css-loader-planckscale (npm)

The package selenology-biohacking-css-loader-planckscale was found to contain malicious code...

Malicious code in apachecn-html-css-zh-pt3 (npm)

The package apachecn-html-css-zh-pt3 was found to contain malicious code...

Malicious code in auth-polaris-rate-limiter-optimize-css-assets-webpack-plugin (npm)

The package auth-polaris-rate-limiter-optimize-css-assets-webpack-plugin was found to contain malicious code...

Malicious code in commitlint-sedimentology-got-css-loader (npm)

The package commitlint-sedimentology-got-css-loader was found to contain malicious code...

Malicious code in css-minimizer-webpack-plugin-taphonomy-tectonic-hydra (npm)

The package css-minimizer-webpack-plugin-taphonomy-tectonic-hydra was found to contain malicious code...

MAL-2025-43913 Malicious code in css-minimizer-webpack-plugin-taphonomy-tectonic-hydra (npm)

The package css-minimizer-webpack-plugin-taphonomy-tectonic-hydra was found to contain malicious code...

Malicious code in spectron-mini-css-extract-plugin-mongoose-indus (npm)

The package spectron-mini-css-extract-plugin-mongoose-indus was found to contain malicious code...

Improper sanitization of CSS values in html/template

...

Linux Distros Unpatched Vulnerability : CVE-2021-30884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously...

Linux Distros Unpatched Vulnerability : CVE-2020-13756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or...

Linux Distros Unpatched Vulnerability : CVE-2018-6164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTM...

Linux Distros Unpatched Vulnerability : CVE-2022-21222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr...