MAL-2025-48834 Malicious code in echats-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in echats-js (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-6833 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out

The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0 via the 'aiotimeclocklitejs' AJAX action due to missing validation on a user controlled key. This makes it...

Malicious Package

Overview js-repack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2025-35356

Malicious code in js-repack npm...

MAL-2025-48554 Malicious code in js-repack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a80a1c4ce3e508e53f6fbcff1d53486d344d5e88efb691abaad37cc22759f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-repack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a80a1c4ce3e508e53f6fbcff1d53486d344d5e88efb691abaad37cc22759f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48620 Malicious code in cucumber-js-cypress-cucumber (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70db607bb8c970e11a45d9a570b2d97a6a3293ca89e4a789c6a8163b9ebf78cb Any computer that has this package installed or running should be considered...

Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview bcrypt-js-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48530 Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in css-platform-js (npm)

The package css-platform-js was found to contain malicious code...

Malicious code in gardr-finn-js (npm)

The package gardr-finn-js was found to contain malicious code...

Malicious code in codegrid-js (npm)

The package codegrid-js was found to contain malicious code...

MAL-2025-48495 Malicious code in gardr-finn-js (npm)

The package gardr-finn-js was found to contain malicious code...

Malicious code in ccs-platform-js (npm)

The package ccs-platform-js was found to contain malicious code...

MAL-2025-48488 Malicious code in codegrid-js (npm)

The package codegrid-js was found to contain malicious code...

MAL-2025-48485 Malicious code in ccs-platform-js (npm)

The package ccs-platform-js was found to contain malicious code...

Malicious Package

Overview we3.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview wb3.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...