CVE-2025-56803

CVE-2025-56803 affects Figma Desktop for Windows v125.6.5. The vulnerability is a command injection in the local plugin loader: if a plugin manifest.json includes a string in the build field, it is passed to Node.js child_process.exec without validation, enabling arbitrary OS command execution wh...

PT-2025-35802

Name of the Vulnerable Software and Affected Versions: Figma Desktop versions 125.6.5 Description: Figma Desktop for Windows version 125.6.5 contains a command injection issue in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin'...

CVE-2025-56803

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to childprocess.exec without validation, leading to...

CVE-2025-56803

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to childprocess.exec without validation, leading to...

Exploit for CVE-2025-56803

CVE-2025-56803 Command Injection Vulnerability via Plugin...

Malicious code in figma-api-spellcheck (npm)

The package figma-api-spellcheck was found to contain malicious code...

Malicious code in @amber-team/figma-utils (npm)

The package @amber-team/figma-utils was found to contain malicious code...

MAL-2025-20521 Malicious code in figma-to-streamlit (npm)

The package figma-to-streamlit was found to contain malicious code...

Malicious code in figma-to-streamlit (npm)

The package figma-to-streamlit was found to contain malicious code...

MAL-2025-7057 Malicious code in @amber-team/figma-utils (npm)

The package @amber-team/figma-utils was found to contain malicious code...

MAL-2025-17335 Malicious code in com.microsoft.mixedreality.toolkit.figmabridge (npm)

The package com.microsoft.mixedreality.toolkit.figmabridge was found to contain malicious code...

MAL-2025-20520 Malicious code in figma-api-spellcheck (npm)

The package figma-api-spellcheck was found to contain malicious code...

Malicious code in pexels-figma (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in figma-plugins-and-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250144845a9dd4a7a0bea8a44c06f50652890d4ab2f0fb860bb51a5a14ea1a54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1647 Malicious code in figma-plugins-and-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250144845a9dd4a7a0bea8a44c06f50652890d4ab2f0fb860bb51a5a14ea1a54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in figma-include-accessibility-annotations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb17fd8a376f1c1967e4a54049e96bf34f63f71f41e75262db53f96e883d43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8719 Malicious code in figma-include-accessibility-annotations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb17fd8a376f1c1967e4a54049e96bf34f63f71f41e75262db53f96e883d43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in figma-ping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebe1815dd250b41e64f2909a2e5146f9cd629767dda41d0a8b14058b18463501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-440 Malicious code in figma-ping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebe1815dd250b41e64f2909a2e5146f9cd629767dda41d0a8b14058b18463501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pexels-figma is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...