Malicious code in pm10-kickstart.css (npm)

The package pm10-kickstart.css was found to contain malicious code...

Malicious code in yuilib-css (npm)

The package yuilib-css was found to contain malicious code...

Malicious code in @zalastax/nolb-css-d (npm)

The package @zalastax/nolb-css-d was found to contain malicious code...

Malicious code in astro-cache-ablation-css-loader (npm)

The package astro-cache-ablation-css-loader was found to contain malicious code...

Malicious code in az-css (npm)

The package az-css was found to contain malicious code...

Malicious code in css-sifymodules (npm)

The package css-sifymodules was found to contain malicious code...

MAL-2025-29535 Malicious code in postcss-css-prefixer (npm)

The package postcss-css-prefixer was found to contain malicious code...

Malicious code in cryptography-dagda-mini-css-extract-plugin-jabbah (npm)

The package cryptography-dagda-mini-css-extract-plugin-jabbah was found to contain malicious code...

Malicious code in css-loader-spinner-proxima-cassini (npm)

The package css-loader-spinner-proxima-cassini was found to contain malicious code...

Malicious code in css-minimizer-webpack-plugin-carpo-scorpius-development (npm)

The package css-minimizer-webpack-plugin-carpo-scorpius-development was found to contain malicious code...

Malicious code in cz-conventional-changelog-css-minimizer-webpack-plugin-electron-jupiter (npm)

The package cz-conventional-changelog-css-minimizer-webpack-plugin-electron-jupiter was found to contain malicious code...

Malicious code in server-mini-css-extract-plugin-orogeny-spawn (npm)

The package server-mini-css-extract-plugin-orogeny-spawn was found to contain malicious code...

Malicious code in css-loader-quito-soap-ursa (npm)

The package css-loader-quito-soap-ursa was found to contain malicious code...

MAL-2025-16555 Malicious code in carina-wasat-css-minimizer-webpack-plugin-paleoclimatology (npm)

The package carina-wasat-css-minimizer-webpack-plugin-paleoclimatology was found to contain malicious code...

CVE-2025-3703: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

Linux Distros Unpatched Vulnerability : CVE-2020-26973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. This...

WordPress HT Mega plugin path traversal vulnerability

WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress, offering over 100 custom widgets, 360+ preset modules, and a variety of templates for blogs, sliders, collapsible menus, and other page elements. A path traversal vulnerability exists in the WordPress HT Mega...

Linux Distros Unpatched Vulnerability : CVE-2022-31744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy...

Linux Distros Unpatched Vulnerability : CVE-2021-23996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could...

CVE-2025-7443: Unrestricted Upload of File with Dangerous Type

The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the storejavascriptcache.php file in all versions up to, and including, 2.2.4...