7065 matches found
MAL-2025-43467 Malicious code in apachecn-js-zh-pt4 (npm)
The package apachecn-js-zh-pt4 was found to contain malicious code...
MAL-2025-46791 Malicious code in yildun-epimetheus-uglify-js-relay (npm)
The package yildun-epimetheus-uglify-js-relay was found to contain malicious code...
MAL-2025-44260 Malicious code in figures-fornax-isostasy-uglify-js (npm)
The package figures-fornax-isostasy-uglify-js was found to contain malicious code...
MAL-2025-44383 Malicious code in geeksforgeeks-js-zh (npm)
The package geeksforgeeks-js-zh was found to contain malicious code...
MAL-2025-45500 Malicious code in paleoclimatology-selenium-neptunology-uglify-js (npm)
The package paleoclimatology-selenium-neptunology-uglify-js was found to contain malicious code...
Malicious code in figures-fornax-isostasy-uglify-js (npm)
The package figures-fornax-isostasy-uglify-js was found to contain malicious code...
MAL-2025-46436 Malicious code in uglify-js-forever-equinox-nodejs (npm)
The package uglify-js-forever-equinox-nodejs was found to contain malicious code...
Malicious code in uglify-js-forever-equinox-nodejs (npm)
The package uglify-js-forever-equinox-nodejs was found to contain malicious code...
MAL-2025-43539 Malicious code in auriga-spectron-webdriver-nuxtjs-native (npm)
The package auriga-spectron-webdriver-nuxtjs-native was found to contain malicious code...
Malicious code in vscode-js-profile-flame (npm)
The package vscode-js-profile-flame was found to contain malicious code...
CVE-2025-58830 WordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Parallax Scrolling Enllax.js parallax-scrolling-enllax-js allows Stored XSS.This issue affects Parallax Scrolling Enllax.js: from n/a through = 0.0.6...
PT-2025-36169
Name of the Vulnerable Software and Affected Versions Parallax Scrolling Enllax.js versions through 0.0.6 Description The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations Upda...
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
...
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
...
Linux Distros Unpatched Vulnerability : CVE-2022-0520
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in NPM radare2.js prior to 5.6.2. CVE-2022-0520 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...
io.undertow.js:undertow-js (>=1.0.0.alpha3, <=1.1.0.beta1), io.undertow.js:undertow-js-freemarker (1.1.0.beta1) +69 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.0.beta6)
io.undertow:undertow-core MAVEN version 1.3.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow.js:undertow-js =1.0.0.alpha3, =2.0.0.alpha13, =2.0.0.alpha13, =2.0.0.alpha13, =2.0.0.beta1 ...
Malicious code in wb3.js (npm)
The package wb3.js was found to contain malicious code...
MAL-2025-42114 Malicious code in wb3.js (npm)
The package wb3.js was found to contain malicious code...