Malicious code in xanadu-sqlite-palynology-release-it (npm)

The package xanadu-sqlite-palynology-release-it was found to contain malicious code...

Malicious code in oscillation-metabolomics-non-blocking-release-it (npm)

The package oscillation-metabolomics-non-blocking-release-it was found to contain malicious code...

Malicious code in release-it-aether-equinox-miranda (npm)

The package release-it-aether-equinox-miranda was found to contain malicious code...

Malicious code in release-it-perseus-prettier-plugin-markdown-leda (npm)

The package release-it-perseus-prettier-plugin-markdown-leda was found to contain malicious code...

MAL-2025-38656 Malicious code in vscode.markdown-it-renderer (npm)

The package vscode.markdown-it-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2822922f8dca5f68d170c921999dd1e45b4dd8b470e088d9aadbe5806cc2069b This package installs a dependency hosted on a custom domain...

MAL-2025-21138 Malicious code in galaxy-wezen-release-it-neuromorphic (npm)

The package galaxy-wezen-release-it-neuromorphic was found to contain malicious code...

MAL-2025-18700 Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)

The package down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn was found to contain malicious code...

MAL-2025-28584 Malicious code in oscillation-metabolomics-non-blocking-release-it (npm)

The package oscillation-metabolomics-non-blocking-release-it was found to contain malicious code...

MAL-2025-39572 Malicious code in xanadu-sqlite-palynology-release-it (npm)

The package xanadu-sqlite-palynology-release-it was found to contain malicious code...

MAL-2025-25938 Malicious code in markdown-it-embed (npm)

The package markdown-it-embed was found to contain malicious code...

MAL-2025-32053 Malicious code in release-it-exobiology-fork-aether (npm)

The package release-it-exobiology-fork-aether was found to contain malicious code...

Have You Turned Off Your Virtual Oven?

You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again to confirm the front door was properly closed. These automatic safety checks give you peace of mind because you know the unlike...

CVE-2025-49044

CVE-2025-49044 is a CSRF-to-Stored XSS vulnerability in the WordPress Simple Poll plugin prior to or up to version 1.1.1. The issue affects Simple Poll by Tosend.it and is documented with CVSS v3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, us...

PT-2025-33179 · Unknown · Tosend.It Simple Poll

Name of the Vulnerable Software and Affected Versions: tosend.it Simple Poll versions through 1.1.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in tosend.it Simple Poll, which also allows Stored Cross-Site Scripting XSS. Recommendations: At the moment, there is no...

Exploit for CVE-2025-50881

CVE-2025-50881: Remote Code Execution in API Use it Flow via m...

Leak Reveals the Workaday Lives of North Korean IT Scammers

Spreadsheets, Slack messages, and files linked to an alleged group of North Korean IT workers expose their meticulous job-planning and targeting—and the constant surveillance they're under...

The Wild West of Shadow IT

Everyone's an IT decision-maker now. The employees in your organization can install a plugin with just one click, and they don't need to clear it with your team first. It's great for productivity, but it's a serious problem for your security posture. When the floodgates of SaaS and AI opened, IT...

CVE-2025-53113

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use the external links feature to fetch...

CVE-2025-53112

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 9.1.0 through 10.0.18, a lack of permission checks can result in unauthorized removal of some specific resources. This is fixed in version 10.0.1...

GLPI Privilege License and Access Control Issues Vulnerability (CNVD-2025-17791)

GLPI is a free asset and IT management software suite that provides ITIL service desk functionality, license tracking and software auditing. A security vulnerability exists in GLPI versions 9.1.0 through 10.0.18, which stems from a failure to perform privilege checks on specific resource deletion...