WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Data Access versions = 5.5.79...

MAL-2026-13831 Malicious code in noxleys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d929b8d2b0bb5277fede1759081c008d05ea8057d8263c6148e7d61001095a This package is a fork of the Baileys WhatsApp library that wires an undocumented routine into the connection lifecycle. On every WhatsApp...

MAL-2026-13819 Malicious code in kanyut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd1fedbe6fa65ad732715731698661fbe733cc186c28634d4f0424284dcbe7 A a static rule matched on keyword co-occurrence ping, GET, id across widely separated lines in lib/Utils/generics.js. The matched tokens are...

MAL-2026-13832 Malicious code in passport811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b8ce5a6dee87674b66e3aad6e3cf750c6e24243dd564922ff7b68be2f48b8 [email protected] contains a single HTML file that impersonates a Cloudflare Turnstile 'Just a moment...' challenge. After the Turnstile callback...

Malicious code in vlbhvgovbbhfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...

Malicious code in prezdentkxheiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b524c1b4d84ba3f109eddb254753a02dac72fa61397c4f03dbcbb814c6aaa68f The package contains only index.html declared as main and package.json. The HTML impersonates a Cloudflare 'Just a moment...' challenge and includes ...

MAL-2026-13797 Malicious code in cvbniydplwe3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edbef37139b40a366aacea90abbd4b80ca581921f213b98ffb17db3b857bfcd The tarball contains only index.html declared as package.json main and no JavaScript, no lifecycle scripts, and no Node-executable entry point...

Malicious code in mnzjgxciwadk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb5ec6b21fbd7d0b720bf6dd7257a5b6e0e9428fe55d8197fccec53c79a662 The package contains a single file, index.html, which is also declared as the package main. The HTML presents a Cloudflare Turnstile-styled challenge...

MAL-2026-13794 Malicious code in clxofwfjskaz7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4dde997a29794d4dfbb4725da833fa7cb4a221dc91d6b820901745eb77f198 The tarball contains only package.json and index.html. package.json declares main: index.html and no lifecycle scripts...

MAL-2026-13835 Malicious code in truecxikdsal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f817d78ce8fd51571e9d9b3d0d10c09a75dc8353e43e55f5440afa8e303c4ce2 Package [email protected] contains 2 files and no static or traced findings indicate exfiltration, install-time code execution, credential access,...

Malicious code in fghvbmniwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8623e3b9a84e8cbe5910bc3d683f19629c49b9d3f0a2e00ab771901efef8146a Package contains a single index.html declared as main, which is a Cloudflare-branded 'Just a moment...' clone embedding a Turnstile widget and heavil...

Malicious code in ms_aidc_com_tw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12bdd45f103beeee602be82a07277a3f0cb842ec3a9829e904911fe37bd2fd5 The package msaidccomtw ships only an index.html that renders a fake Cloudflare Turnstile 'security verification' page. On Turnstile completion,...

MAL-2026-13821 Malicious code in mnchfnvbue1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff948b6e989a38a47cbb12d4e633d48a2069c04bb64066d66140f3b27835ef86 The tarball contains a single file, index.html, declared as the package main. The HTML contains heavily obfuscated JavaScript that mimics a Cloudflar...

MAL-2026-13809 Malicious code in fhj8cv9dkwm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91ea4120fcb82c9a36d533346c28a2ce7ed225ed31a89526d9cee45f0be2581 Package ships a single index.html that mimics a Cloudflare Turnstile 'Just a moment...' verification page. An obfuscated obfuscator.io-style script...

MAL-2026-13817 Malicious code in jhkxcixudnvm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecafeb32fc0bc6beb0fcd9f6cab36efa71c8e69dc966271eea55bd03ba8eadf The package contains only package.json and index.html, with index.html declared as main. The HTML imitates a Cloudflare 'Just a moment...' verificati...

MAL-2026-13783 Malicious code in bcnfjndwbkf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1fc1ec45930a69372eadc47b662c5d82b247b5b4227feacda3d1c4302b4bf3 The package contains only index.html and declares main: 'index.html' with no scripts, no bin, and no JavaScript library surface. The HTML mimics a...

MAL-2026-13846 Malicious code in yangming8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c011964f9503dad45858ba2fdd5de1303275d7a0a680e2c482c3e14d90c4e33c The tarball's only shipped file is index.html, declared as the package's main. There are no lifecycle scripts, no JavaScript entry point, no...

MAL-2026-13818 Malicious code in jkbnwsdf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67b8d2fe8ba4fcec395d1fa7497515b41f2e4edc7f25e12c2b4b4abcebe358 The package contains a single file, index.html, declared as the package main. The HTML is styled as a Cloudflare Turnstile 'Just a moment...' challen...

CVE-2026-68868 Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and Variables

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...

Malicious code in biklimaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fe526cf29535e21a0d1c3206405e20d0447ca01f25ea46dc9569ab52066555 The npm postinstall hook node bin/biklimaster.js install --postinstall prompts for UAC elevation and then reconfigures the installer's Windows host...