Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fe3bd99e2f11ab8bb09a9086c4dca8af56372031492ed11d90f1e32a0e8f53 The package @lokeswari-satyanarayanan/rn-zustand-expo-template was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199686

Webform Multiple File Upload module for Drupal 7.x contains a cross-site scripting XSS vulnerability in the file name renderer. An unauthenticated attacker can exploit this vulnerability by uploading a file with a malicious filename containing JavaScript code e.g., "" to a Webform node with a...

CVE-2025-13595 CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizadorgit.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite...

CVE-2025-13595

CIBELES AI WordPress plugin vulnerability (CVE-2025-13595) arises from a missing capability check in actualizador_git.php, affecting all versions up to 1.10.8. Unauthenticated attackers can perform arbitrary file uploads, enabling retrieval of GitHub repos and overwriting plugin files on the serv...

GO-2025-4149 OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr...

GO-2025-4157 Babylon's malformed vote extensions are not rejected in github.com/babylonlabs-io/babylon

Babylon's malformed vote extensions are not rejected in github.com/babylonlabs-io/babylon...

Exploit for CVE-2025-13595

CIBELES AI extractTo$extractDir; $rootInsideZip = $extrac...

Malicious code in @voiceflow/npm-package-json-lint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb13f449b9f8582e57b2b30103359ccd3efcbde9b172f827a481af246122211 The package @voiceflow/npm-package-json-lint-config was found to contain malicious code. Source: google-open-source-security...

Malicious code in @voiceflow/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4db5527f8a6098b9553e656b50ee1e0fcae45b163917de83299e9e5200ff96f The package @voiceflow/eslint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cb82e7b11eea9aa7260ed7a7e31a29e21d10d81735768c536e42ee88d28b71 The package @oku-ui/slider was found to contain malicious code. Source: google-open-source-security...

Malicious code in @oku-ui/menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c596c8e5c233827737327907a4b122e7fc154c1865ba347b975cd3dda7b591a9 The package @oku-ui/menu was found to contain malicious code. Source: google-open-source-security...

Malicious code in selenium-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ecd0e6dc81b318ff25ac39f8955edd9409fd4ffec088409a60da0570a050691 The package selenium-session was found to contain malicious code. Source: google-open-source-security...

Malicious code in @oku-ui/primitive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1bc2783e4344a88f89cf7274b47f7dfb07c2b50833945b40a060a10a7f0092 The package @oku-ui/primitive was found to contain malicious code. Source: google-open-source-security...

Malicious code in @productdevbook/ts-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3152cc79cb103f8af6266254c613952272ccb9481db9fb8f299a3fdfa6db7a9 The package @productdevbook/ts-i18n was found to contain malicious code. Source: google-open-source-security...

Malicious code in @voiceflow/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae935a1a5c4c3792b0a6e51cfeca10ee5d11192e0928bf28ac3fd58ce89c24b7 The package @voiceflow/fetch was found to contain malicious code. Source: ghsa-malware 18354d00f52198c519ac2adf8360486ea1817d9cd1e577fe147eaff0d7633f...

Malicious code in @voiceflow/pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83773dcab47d7affa39ddff351187eb072a563a8e3a84ef0d0b525c0f5e0185 The package @voiceflow/pino-pretty was found to contain malicious code. Source: google-open-source-security...

Malicious code in nuxt-keycloak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb088ab2b0e4b6991065c6bcdc57302ff545bb3fe2f2a73ec21fafeae1175f8 The package nuxt-keycloak was found to contain malicious code. Source: google-open-source-security...

Malicious code in command-irail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e642a4e9c3c0f2a51f790c6cbc5aac4db1aeea9f3b7e2818441aaf072159ada9 The package command-irail was found to contain malicious code. Source: ghsa-malware d205be92bee9a5d776450361e21b39a2f5489d337a73198400e070452f2fc6e3...

Malicious code in @oku-ui/collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881324e8071cf3faabccf492103c5280af893332c6a40845e781826209b86b0f The package @oku-ui/collection was found to contain malicious code. Source: google-open-source-security...

Malicious code in create-silgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1bd1ddfab5f3ea6caf4f09a93f2ef08f7298e2d68892949e0a6f2975cd1b78 The package create-silgi was found to contain malicious code. Source: google-open-source-security...