MAL-2025-15153 Malicious code in avail-able-albu-m-down-load-5541-death-is-this-communion-n9ln6-ucncmt (npm)

The package avail-able-albu-m-down-load-5541-death-is-this-communion-n9ln6-ucncmt was found to contain malicious code...

MAL-2025-26798 Malicious code in mp3-do-wnload-file-to-day-i-can-hear-the-heart-beating-as-one-sdcg3-rzkefk (npm)

The package mp3-do-wnload-file-to-day-i-can-hear-the-heart-beating-as-one-sdcg3-rzkefk was found to contain malicious code...

MAL-2025-41004 Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)

The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...

MAL-2025-13903 Malicious code in a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo (npm)

The package a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo was found to contain malicious code...

MAL-2025-26805 Malicious code in mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue (npm)

The package mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue was found to contain malicious code...

MAL-2025-13904 Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm)

The package a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc was found to contain malicious code...

MAL-2025-36933 Malicious code in tiktokdl-api (npm)

The package tiktokdl-api was found to contain malicious code...

MAL-2025-26790 Malicious code in mp3-do-wnload-file-to-day-143363-green-and-gray-qh3gk-eijkct (npm)

The package mp3-do-wnload-file-to-day-143363-green-and-gray-qh3gk-eijkct was found to contain malicious code...

MAL-2025-37880 Malicious code in unsplash-it-download (npm)

The package unsplash-it-download was found to contain malicious code...

MAL-2025-18698 Malicious code in down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck (npm)

The package down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck was found to contain malicious code...

Malicious code in mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg (npm)

The package mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg was found to contain malicious code...

MAL-2025-18557 Malicious code in do-wnload-available-replica-ftpb8-iuhfqd (npm)

The package do-wnload-available-replica-ftpb8-iuhfqd was found to contain malicious code...

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager allows Path Traversal. This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.9.0...

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

CVE-2025-54732 WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Cross Site Request Forgery.This issue affects WPDM – Premium Packages: from n/a through = 6.0.2...

CVE-2025-54732

CVE-2025-54732 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WPDM – Premium Packages, affecting versions up to 6.0.2. The issue could allow actions to be performed on behalf of an authenticated user. Remediation: upgrade to a version later than 6.0.2 (fixed i...

Malicious Package

Overview github.com/stripedconsu/linker is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...

Malicious Package

Overview github.com/wetteepee/hcloud-ip-floater is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate package...

Malicious Package

Overview github.com/weightycine/replika is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...

Malicious Package

Overview github.com/ordinarymea/TNSRIDS is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...