confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

EUVD-2021-11021

Malware in sbrugna...

MAL-2025-42989 Malicious code in @zalastax/nolb-_dsr-rollback-a (npm)

The package @zalastax/nolb-dsr-rollback-a was found to contain malicious code...

@account-kit/react (>=4.0.0-alpha.0, <=4.88.5), @account-kit/react-native (>=4.15.0, <=4.88.5) +52 more potentially affected by CVE-2024-57068 via @tanstack/form-core (>=0.0.1, <=0.42.0)

@tanstack/form-core NPM version =0.0.1, =4.0.0-alpha.0, =4.15.0, =3.13.0, =0.0.1, =0.1.1, =0.0.1, =1.0.0, =0.3.5, =0.3.3, =4.3.0 and more Source cves: CVE-2024-57068 Source advisory: OSV:GHSA-GGV3-VMGW-XV2Q...

@conform-to/react (>=0.1.0, <=0.9.1), @kentcdodds/workshop-app (>=1.41.0, <=1.46.7) +1 more potentially affected by CVE-2024-32866 via @conform-to/dom (>=0.1.0, <=0.9.1)

@conform-to/dom NPM version =0.1.0, =0.1.0, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...

Cross site scripting

The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...