Malicious code in mp3-file-zip-d-ownload-459867-forgiveness-3nns7-tralfe (npm)

The package mp3-file-zip-d-ownload-459867-forgiveness-3nns7-tralfe was found to contain malicious code...

MAL-2025-26807 Malicious code in mp3-file-zip-d-ownload-37823-billys-live-bait-gqddl-gymxld (npm)

The package mp3-file-zip-d-ownload-37823-billys-live-bait-gqddl-gymxld was found to contain malicious code...

MAL-2025-26802 Malicious code in mp3-file-zip-d-ownload-109598-were-not-talking-thl8a-vosqbj (npm)

The package mp3-file-zip-d-ownload-109598-were-not-talking-thl8a-vosqbj was found to contain malicious code...

MAL-2025-26804 Malicious code in mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa (npm)

The package mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa was found to contain malicious code...

MAL-2025-26808 Malicious code in mp3-file-zip-d-ownload-459867-forgiveness-3nns7-tralfe (npm)

The package mp3-file-zip-d-ownload-459867-forgiveness-3nns7-tralfe was found to contain malicious code...

MAL-2025-20535 Malicious code in file-alb-um-zip-new-mp3-35841-harbor-lights-hzhvw-aeyuch (npm)

The package file-alb-um-zip-new-mp3-35841-harbor-lights-hzhvw-aeyuch was found to contain malicious code...

MAL-2025-26811 Malicious code in mp3-file-zip-d-ownload-black-one-ku2xp-tefjgp (npm)

The package mp3-file-zip-d-ownload-black-one-ku2xp-tefjgp was found to contain malicious code...

MAL-2025-26801 Malicious code in mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui (npm)

The package mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-34920-albatross-8rmsa-ghzpzl (npm)

The package mp3-file-zip-d-ownload-34920-albatross-8rmsa-ghzpzl was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-6863-lp5-h6rvm-mfjeql (npm)

The package mp3-file-zip-d-ownload-6863-lp5-h6rvm-mfjeql was found to contain malicious code...

MAL-2025-26810 Malicious code in mp3-file-zip-d-ownload-82223-cage-tropical-48dqs-lilnlq (npm)

The package mp3-file-zip-d-ownload-82223-cage-tropical-48dqs-lilnlq was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue (npm)

The package mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue was found to contain malicious code...

CVE-2024-22404 Permissions bypass in Nextcloud with the files zip app

Nextcloud files Zip app is a tool to create zip archives from one or multiple files from within Nextcloud. In affected versions users can download "view-only" files by zipping the complete folder. It is recommended that the Files ZIP app is upgraded to 1.2.1, 1.4.1, or 1.5.0. Users unable to...

Kaswara Modern VC Addons (0-day) - Unauthenticated Arbitrary File Upload

The plugin allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fontsicon directory with no checks for malicious files such as PHP. The vendor has been unresponsive to both the reporter and Envato,...