Malicious Package

Overview filigren-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in filigren-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b84001265dc640f83d6ea3e8dd5ac422aeb96be876ac2b9c9482b846b5d735b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47016 Malicious code in filigren-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b84001265dc640f83d6ea3e8dd5ac422aeb96be876ac2b9c9482b846b5d735b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nuxt Icon < 1.4.5 Server-Side Request Forgery

Nuxt Icon versions prior to 1.4.5 are vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs in the icon fetching functionality. An attacker can exploit this vulnerability by providing a malicious URL that points to an internal or restricted resource,...

CVE-2025-58837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-f (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-f was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-e (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-e was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-g (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-g was found to contain malicious code...

MAL-2025-43013 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-e (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-e was found to contain malicious code...

MAL-2025-43014 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-f (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-f was found to contain malicious code...

MAL-2025-44265 Malicious code in filigron-icon (npm)

The package filigron-icon was found to contain malicious code...

Malicious code in filigron-icon (npm)

The package filigron-icon was found to contain malicious code...

CVE-2025-58837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

CVE-2025-58837

CVE-2025-58837 : WordPress SS Font Awesome Icon plugin (versions

CVE-2025-58837 WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

CVE-2025-58837 WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Mika in WordPress Plugin SS Font Awesome Icon versions = 4.1.3...

PT-2025-36176

Name of the Vulnerable Software and Affected Versions: Shiful H SS Font Awesome Icon versions through 4.1.3 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...

Malicious Package

Overview tailwind-react-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in tailwind-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...