Malicious code in excel-data-exporter (npm)

The package excel-data-exporter was found to contain malicious code...

MAL-2025-20036 Malicious code in excel-data-exporter (npm)

The package excel-data-exporter was found to contain malicious code...

Shopify: store internal email disclosed through shopify-data-exporter

Summary: Hey Shopify, When a store install shopify-data-exporter app to export various data of the store a link is sent to the store internal email. This internal email is disclosed via the below request to anyone json GET /?shop=yourstore.myshopify.com HTTP/2 Host:...