Malicious code in ccs-platform-js (npm)

The package ccs-platform-js was found to contain malicious code...

Malicious code in gardr-finn-js (npm)

The package gardr-finn-js was found to contain malicious code...

Malicious code in codegrid-js (npm)

The package codegrid-js was found to contain malicious code...

MAL-2025-48485 Malicious code in ccs-platform-js (npm)

The package ccs-platform-js was found to contain malicious code...

MAL-2025-48495 Malicious code in gardr-finn-js (npm)

The package gardr-finn-js was found to contain malicious code...

MAL-2025-48488 Malicious code in codegrid-js (npm)

The package codegrid-js was found to contain malicious code...

Malicious Package

Overview we3.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview vite-binding-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview wb3.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview vite-linting-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2025-42488

Name of the Vulnerable Software and Affected Versions QuickJS affected versions not specified Description A Use-After-Free UAF condition exists in the QuickJS engine’s standard library when processing unhandled rejected promises. The js std promise rejection check function iterates through the...

PT-2025-42493

Name of the Vulnerable Software and Affected Versions QuickJS affected versions not specified Description A flaw exists in the QuickJS engine’s BigInt string parsing logic within the js bigint from string function when creating a BigInt from a string containing a very large number of digits. The...

tom-microservice (3.2.28) potentially affected by CVE-2025-62380 via mailgen (2.0.20)

mailgen NPM version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice 3.2.28 Source cves: CVE-2025-62380 Source advisory: SNYK:JS-MAILGEN-13559301...

CVE-2025-11160

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in all versions up to, and including, 8.6.1. This is due to insufficient input sanitization and output escaping of user-supplied JavaScript code in the Custom JS module. This makes...

CVE-2025-11160 WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in all versions up to, and including, 8.6.1. This is due to insufficient input sanitization and output escaping of user-supplied JavaScript code in the Custom JS module. This makes...

WordPress WPBakery Page Builder plugin <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module vulnerability

Stored Cross-Site Scripting via Custom JS Module vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WPBakery Page Builder versions = 8.6.1...

CVE-2025-11160: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in all versions up to, and including, 8.6.1. This is due to insufficient input sanitization and output escaping of user-supplied JavaScript code in the Custom JS module. This makes...

PT-2025-42238

Name of the Vulnerable Software and Affected Versions WPBakery Page Builder versions prior to 8.6.1 Description The WPBakery Page Builder plugin for WordPress is affected by a Stored Cross-Site Scripting issue in the Custom JS module. Insufficient input sanitization and output escaping of...

WordPress plugin WPBakery Page Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

Parse-SDK-JS 安全漏洞

Parse-SDK-JS is an open source developer toolkit for the Parse Platform. A security vulnerability exists in Parse-SDK-JS versions prior to 7.0.0 that originates from the injection of a malicious payload and could lead to the remote execution of arbitrary code...