Malicious code in kodeks (npm)

The package kodeks was found to contain malicious code...

MAL-2025-24739 Malicious code in kodeks (npm)

The package kodeks was found to contain malicious code...

The vulnerability of the web client of the legal system “Kodeks” relates to the failure to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the “Kodeks” reference-and-law system’s web client is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...