MAL-2025-3551 Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-site Scripting (XSS)

express-validator is vulnerable to cross-site scripting XSS. The vulnerability exists as it was possible to bypass the sanitize function as the toString function does not sanitize arrays...