PT-2025-37726

Name of the Vulnerable Software and Affected Versions: drawnix versions through 0.2.1 Description: drawnix is an all-in-one open-source whiteboard tool. A cross-site scripting XSS issue exists in the debug logging functionality. User-controlled content is inserted directly into the DOM via...

Malicious code in node-winston-logger (npm)

The package node-winston-logger was found to contain malicious code...

Malicious code in lovable-cookie-logger (npm)

The package lovable-cookie-logger was found to contain malicious code...

MAL-2025-44170 Malicious code in eslint-logger (npm)

The package eslint-logger was found to contain malicious code...

MAL-2025-45336 Malicious code in node-winston-logger (npm)

The package node-winston-logger was found to contain malicious code...

MAL-2025-45506 Malicious code in parse-logger (npm)

The package parse-logger was found to contain malicious code...

Malicious code in parse-logger (npm)

The package parse-logger was found to contain malicious code...

Malicious code in eslint-logger (npm)

The package eslint-logger was found to contain malicious code...

MAL-2025-45068 Malicious code in lovable-cookie-logger (npm)

The package lovable-cookie-logger was found to contain malicious code...

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

...

Linux Distros Unpatched Vulnerability : CVE-2025-54812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HT...

Linux Distros Unpatched Vulnerability : CVE-2025-27607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing...

Malicious code in rtk-logger (npm)

The package rtk-logger was found to contain malicious code...

Malicious code in vortex-logger (npm)

The package vortex-logger was found to contain malicious code...

MAL-2025-42038 Malicious code in node-logger-sdk (npm)

The package node-logger-sdk was found to contain malicious code...

MAL-2025-42007 Malicious code in husky-logger (npm)

The package husky-logger was found to contain malicious code...

MAL-2025-42082 Malicious code in session-logger (npm)

The package session-logger was found to contain malicious code...

Malicious code in sessions-logger (npm)

The package sessions-logger was found to contain malicious code...

Malicious code in session-logger (npm)

The package session-logger was found to contain malicious code...

Malicious code in logger-cookie (npm)

The package logger-cookie was found to contain malicious code...