PT-2025-47742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows DOM-Based XSS.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.13.1.2...

CVE-2025-12878

The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wfopphone shortcode in all versions up to, and including, 3.13.1.2. This is due to insufficient input sanitization and output escaping on the user-supplied default...

Watch out for Walmart gift card scams

You’ve probably seen it before—a bright, urgent message claiming you’ve qualified for a $750 or $1000 Walmart gift card. All you have to do is answer a few questions. It looks harmless enough. But once you click, you find yourself in a maze of surveys, redirects, and "partner offers"—without ever...

WordPress FunnelKit plugin < 3.12.0.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Marc Montpas in WordPress Plugin Funnel Builder by FunnelKit versions 3.12.0.1...

Malicious Package

Overview phoenix-upper-funnel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-26006

Malicious code in bioql PyPI...

EUVD-2025-21627

Malicious code in bioql PyPI...

EUVD-2024-30512

Malicious code in bioql PyPI...

EUVD-2024-47846

Malicious code in bioql PyPI...

EUVD-2025-8401

Malicious code in bioql PyPI...

EUVD-2024-45415

Malicious code in bioql PyPI...

EUVD-2024-46435

Malicious code in bioql PyPI...

EUVD-2024-34366

Malicious code in bioql PyPI...

EUVD-2024-29254

Malicious code in bioql PyPI...

EUVD-2025-28567

Malicious code in bioql PyPI...

EUVD-2024-26807

Malicious code in bioql PyPI...

Malicious code in phoenix-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47825 Malicious code in phoenix-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-phoenix-tpp-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...