Malicious code in twitch-twilight-intl (npm)

The package exfiltrates system data to remote server --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01efff3eeb27457695f8dc2651f9944b72ee21d46a4579f33d0078e509887101 The package twitch-twilight-intl was found to contain malicious code. Source: ghsa-malware...

@ainsleydev/payload-helper (>=0.0.6 <=0.1.2), @davincicoding/payload-plugin-kit (=0.0.4) +9 more potentially affected by CVE-2026-25544 via @payloadcms/db-sqlite (>=3.0.0-beta.116 <=3.72.0)

@payloadcms/db-sqlite NPM version =3.0.0-beta.116, =0.0.6, =1.1.10, =1.2.0 - payload-smart-deletion =1.0.7 - simple-shop =1.0.0 Source cves: CVE-2026-25544 Source advisory: SNYK:JS-PAYLOADCMSDBSQLITE-15240188...

Malicious Package

Overview intl-tel-input-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in intl-tel-input-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcf244ee511453d176367146c8b6b5ee74d18e3037210dd63d19712c8647991 The package intl-tel-input-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-205593

Malicious code in intl-tel-input-utils npm...

MAL-2025-192959 Malicious code in intl-tel-input-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcf244ee511453d176367146c8b6b5ee74d18e3037210dd63d19712c8647991 The package intl-tel-input-utils was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @decentraland-gatsby/intl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @decentraland-gatsby/intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c478ce47e595b70be3bf3ed4905775006b6e270a90bbbea45698e1817c8315ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48961 Malicious code in @decentraland-gatsby/intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c478ce47e595b70be3bf3ed4905775006b6e270a90bbbea45698e1817c8315ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2022-3499

Malicious code in bioql PyPI...

CVE-2025-8293 Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

Malicious code in intl-summer-2017 (npm)

The package intl-summer-2017 was found to contain malicious code...

MAL-2025-23289 Malicious code in intl-summer-2017 (npm)

The package intl-summer-2017 was found to contain malicious code...

Malicious code in @iptm-components/intl (npm)

The package @iptm-components/intl was found to contain malicious code...

MAL-2025-8078 Malicious code in @iptm-components/intl (npm)

The package @iptm-components/intl was found to contain malicious code...

MAL-2025-22820 Malicious code in hw-intl (npm)

The package hw-intl was found to contain malicious code...

Malicious code in hw-intl (npm)

The package hw-intl was found to contain malicious code...

Malicious code in svelte-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4125174a3a5dd31d226347f4233e451beb406573ff2e254d5b9b6289f52ff3af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6220 Malicious code in svelte-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4125174a3a5dd31d226347f4233e451beb406573ff2e254d5b9b6289f52ff3af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 42 : php (2025-2c344545bf)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2c344545bf advisory. PHP version 8.4.10 03 Jul 2025 BcMath: Fixed bug GH-18641 Accessing a BcMath\Number property by ref crashes. nielsdos Core: Fixed bugs GH-17711 and...