Malicious code in debounce-event (npm)

The package debounce-event was found to contain malicious code...

Malicious code in @amber-team/react-event-tracking (npm)

The package @amber-team/react-event-tracking was found to contain malicious code...

Malicious code in pegasus-element-ui-winston-event (npm)

The package pegasus-element-ui-winston-event was found to contain malicious code...

Malicious code in EventRelayEmitter (npm)

The package EventRelayEmitter was found to contain malicious code...

MAL-2025-27933 Malicious code in nuxtjs-event-zenobia-quasar (npm)

The package nuxtjs-event-zenobia-quasar was found to contain malicious code...

MAL-2025-29014 Malicious code in pegasus-element-ui-winston-event (npm)

The package pegasus-element-ui-winston-event was found to contain malicious code...

MAL-2025-32638 Malicious code in sails-event-sirius-jwt (npm)

The package sails-event-sirius-jwt was found to contain malicious code...

MAL-2025-28350 Malicious code in ophiuchus-comet-wavefunction-event (npm)

The package ophiuchus-comet-wavefunction-event was found to contain malicious code...

MAL-2025-32180 Malicious code in reverb-event (npm)

The package reverb-event was found to contain malicious code...

MAL-2025-34102 Malicious code in structured-event-logger (npm)

The package structured-event-logger was found to contain malicious code...

MAL-2025-22178 Malicious code in hapi-event-store (npm)

The package hapi-event-store was found to contain malicious code...

GHSA-XCCG-43HX-C846

creationtimestamp| type| source ---|---|--- 2025-08-14 17:02:59+00:00| seen| Telegram/2aiCe15jUeeRDLOadJeMH7VKDKBtBq9vNFQ5Yzu3yuNw...

CVE-2025-55010

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, an unsafe deserialization vulnerability in the ProjectEventActvityFormatter allows admin users the ability to instantiate arbitrary php objects by modifying the event"data" field in the...

CVE-2025-50040

creationtimestamp| type| source ---|---|--- 2025-08-14 16:01:49+00:00| seen| Telegram/5iYLzCeKfoFZKEWfzOkZ2wJCgrhj-o8gEehmVycLMZhO1Y...

CVE-2025-9036

A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection...

CVE-2021-442280

creationtimestamp| type| source ---|---|--- 2025-08-14 14:03:30+00:00| seen| https://gist.github.com/c0axial/f499717d0046678e19e2f0d43b9d4b55...

CVE-2025-9036

Rockwell Automation FactoryTalk Action Manager (v1.0.0 Runtime) is affected by a vulnerability in its runtime event system that permits unauthenticated local access to a reusable API token. The token is broadcast over a WebSocket and can be intercepted by any local client listening on the connect...

CVE-2025-52731

Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through =...

CVE-2025-52730

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Stored XSS.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a throug...

CVE-2025-55672

creationtimestamp| type| source ---|---|--- 2025-08-14 10:55:20+00:00| seen| https://seclists.org/oss-sec/2025/q3/106 2025-08-14 13:15:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwegcyka5d2y...