MAL-2025-17804 Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code...

MAL-2025-27331 Malicious code in neuromorphic-terser-csv-dagda (npm)

The package neuromorphic-terser-csv-dagda was found to contain malicious code...

Malicious code in norma-csv-impulse-gatsby (npm)

The package norma-csv-impulse-gatsby was found to contain malicious code...

Malicious code in terser-module-csv-promise (npm)

The package terser-module-csv-promise was found to contain malicious code...

MAL-2025-17803 Malicious code in csv-jekyll-equinox-pegasus (npm)

The package csv-jekyll-equinox-pegasus was found to contain malicious code...

MAL-2025-27722 Malicious code in norma-csv-impulse-gatsby (npm)

The package norma-csv-impulse-gatsby was found to contain malicious code...

MAL-2025-17802 Malicious code in csv-hermes-cryonics-solis (npm)

The package csv-hermes-cryonics-solis was found to contain malicious code...

Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...

Malicious code in public-csv-carpo-cygnus (npm)

The package public-csv-carpo-cygnus was found to contain malicious code...

Malicious code in csv-jekyll-equinox-pegasus (npm)

The package csv-jekyll-equinox-pegasus was found to contain malicious code...

Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code...

Malicious code in dependencies-envconfig-csv-auriga (npm)

The package dependencies-envconfig-csv-auriga was found to contain malicious code...

Malicious code in csv-module-mocha-lyra (npm)

The package csv-module-mocha-lyra was found to contain malicious code...

Malicious code in neuromorphic-terser-csv-dagda (npm)

The package neuromorphic-terser-csv-dagda was found to contain malicious code...

Malicious code in csv-hermes-cryonics-solis (npm)

The package csv-hermes-cryonics-solis was found to contain malicious code...

MAL-2025-18286 Malicious code in dependencies-envconfig-csv-auriga (npm)

The package dependencies-envconfig-csv-auriga was found to contain malicious code...

MAL-2025-40690 Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...

PT-2025-32992 · Unknown · Cyclonedx Sunshine

Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9 Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2025-52386

CVE-2025-52386 affects CycloneDX Sunshine v0.9. The issue arises when processing JSON input without validating formulas, enabling a CSV Formula Injection via crafted JSON files. Potential impact includes injection into downstream CSV, depending on how the data are consumed. The connected document...

CVE-2025-8808

A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/save of the component com.jeff.tianti.controller. The manipulation leads to csv injection. The attack may be initiated...