EUVD-2025-175503

Malicious code in xenon-prettier-plugin-markdown-csv-barnard npm...

EUVD-2025-179450

Malicious code in csv-mongodb-rehype-less-loader npm...

EUVD-2025-179455

Malicious code in csv-aldebaran-biohacking-cluster npm...

EUVD-2025-179810

Malicious code in ceres-perseus-csv-nconf npm...

EUVD-2025-176627

Malicious code in rimraf-quantum-csv-javascript npm...

Malicious code in kuiperbelt-taurus-csv-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8993b5329a7604ba0c4c94d86538798b1f58cc2d7e21fb16f89b966ebf27387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179452

Malicious code in csv-helmet-dione-canopus npm...

MAL-2025-189248 Malicious code in rimraf-quantum-csv-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909070a68830c6d663c79812a272f46e552253bfb360b94ab3ec3234e687778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186434 Malicious code in csv-steganography-sadr-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576c9c5300d33eedfca84952fa6d232cca75ad84dbeb63ccde6da8ff03408c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64406

CVE-2025-64406 affects Apache OpenOffice up to 4.1.15. It is an out-of-bounds write vulnerability that could crash the program or corrupt memory when a crafted document is processed. Upgrading to OpenOffice 4.1.16 fixes the issue. CVSSv3.1 base score 4.3 (MEDIUM) with network attack vector, low c...

CVE-2025-64406 Apache OpenOffice: Possible memory corruption during CSV import

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the...

CVE-2025-12732

CVE-2025-12732 impacts the WordPress plugin “WP Import – Ultimate CSV XML Importer for WordPress” (versions

CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...

WordPress WP Import plugin <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Author+ Sensitive Information Exposure vulnerability discovered by M Indra Purnama type5afe in WordPress Plugin WP Ultimate CSV Importer versions = 7.33...

EUVD-2025-111507

Malicious code in lyra-grus-csv-dotenv-parse-variables npm...

EUVD-2025-114750

Malicious code in csv-subscription-apollo-meissa npm...

EUVD-2025-122374

Malicious code in run-script-mysql-antd-csv npm...

EUVD-2025-123899

Malicious code in pegasus-csv-concurrently-sedna npm...

EUVD-2025-114756

Malicious code in csv-pulsar-epimetheus-telesto npm...

EUVD-2025-111514

Malicious code in lynx-yildun-csv-xenon npm...