Malicious code in calypso-typescript-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc88471b8b8d98c729b5e4e741f7a4730627918e7f07353ebf02bb22fe52727f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-272 Malicious code in autocomplete-theme-classic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 451eb3c367c19aa2d0c11a612b877514d92eb231559a3f7fff0e7bd2fc6ecb17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-278 Malicious code in calypso-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98eff47a4acde03f525440e1a5b4a46bb09d9766422550e449954a95d3cb607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-eslint-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e56d5029c9f673038593248e7a19047892f45f4344d5a98af273acf9d2a358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13536

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

CVE-2024-13536

CVE-2024-13536 affects the WordPress plugin “1003 Mortgage Application” (versions up to 1.87). The vulnerability is a Full Path Disclosure caused by the publicly accessible /inc/class/fnm/export.php when error logging is enabled, enabling unauthenticated attackers to retrieve the webapp’s full pa...

WordPress 1003 Mortgage Application plugin <= 1.87 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin 1003 Mortgage Application versions = 1.87...

CVE-2024-13536: Generation of Error Message Containing Sensitive Information

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

Malicious code in prem-tempy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812382550893a865e6760ee51e6a6bce43d814d5f20949105b118999088dd1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-smaato (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db0a05213eccd279084fc7d5d7545e8ddd2b658f9db8a890b1994b4c9a6d6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prombox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747f8685d1b7d0c61cf37084a157de813f48b43979c3089b52027da3ace3dbe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-249 Malicious code in storytel.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac8a26871ff9acbc3aae4118bf1e4716b305b8547d5fcd1f650c7fd5580b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-208 Malicious code in network-update-pricing-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9db8491c3bb7eae747fc02ec7dcd7becaf1f75468ebcacc0d42410bd0c22946f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-251 Malicious code in testing-in-reise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7336c52cac589d1a566dcb47ec9914f98494234e4fb8d9c5b36832279776c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in podium-pride (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abcc917b2c3c387cbb0096d57ec3b264785aa5e13f0fd89e57133b7c30c820c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in abstract-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5560557298d66779bfafcfea3cdb16ccd6ec2da1cbd12566d3f373ff9a042c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ie8-dom-define (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bafd820b50caefd5e1af4ca12fcd7861408751d2ebe06de855897f04480f13c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...